PT-2019-1452 · Microsoft · Visual Studio+1
Publicado
2019-02-12
·
Atualizado
2019-03-06
·
CVE-2019-0613
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
.NET Framework versions (affected versions not specified)
Visual Studio versions (affected versions not specified)
Description
A remote code execution issue exists due to the software's failure to properly check the source markup of a file. This could allow an attacker to run arbitrary code in the context of the current user. If the user has administrative rights, the attacker could gain control of the system, install programs, view or modify data, or create new accounts with full rights. The exploitation requires a user to open a specially crafted file with an affected version of the software.
Recommendations
For .NET Framework, update to a version that includes the fix for this issue.
For Visual Studio, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting the use of files from untrusted sources to minimize the risk of exploitation.
Avoid opening specially crafted files with affected versions of .NET Framework or Visual Studio until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
.Net Framework
Visual Studio