PT-2023-3374 · Microsoft+1 · Visual Studio+2

Ycdxsb · Publicado 2023-06-13 · Atualizado 2024-12-13 · CVE-2023-33126

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio and Microsoft .NET (affected versions not specified)

Description The issue is related to insufficient input validation in Microsoft Visual Studio and the Microsoft .NET platform. Exploitation of this issue may allow an attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2023-4590

ALT-PU-2023-4591

ALT-PU-2023-4592

ALT-PU-2023-4593

ALT-PU-2023-4594

ALT-PU-2023-4595

ALT-PU-2023-4610

ALT-PU-2023-4611

ALT-PU-2024-16792

ALT-PU-2024-16794

ALT-PU-2024-16796

ALT-PU-2024-16939

BDU:2023-03531

BIT-DOTNET-2023-33126

BIT-DOTNET-SDK-2023-33126

CVE-2023-33126

GHSA-GH24-9QJJ-MR67

Produtos afetados

Alt Linux

.Net Framework

Visual Studio

Referências · 166

• 🔥 https://github.com/bcdannyboy/CVE-2023-44487 · Exploit
• 🔥 https://github.com/imabee101/CVE-2023-44487 · Exploit
• 🔥 https://github.com/studiogangster/CVE-2023-44487 · Exploit
• 🔥 https://github.com/nxenon/cve-2023-44487 · Exploit
• https://github.com/dotnet/sdk · Nota
• https://github.com/dotnet/sdk/security/advisories/GHSA-gh24-9qjj-mr67 · Nota
• https://github.com/dotnet/announcements/issues/254 · Nota
• https://github.com/secengjeff/rapidresetclient · Nota
• https://github.com/terrorist/HTTP-2-Rapid-Reset-Client · Nota
• https://github.com/micrictor/http2-rst-stream · Nota
• https://github.com/ndrscodes/http2-rst-stream-attacker · Nota
• https://safe-surf.ru/specialists/bulletins-nkcki/703128 · Nota de Segurança
• https://t.me/cibsecurity/65216 · Publicação no Telegram
• https://safe-surf.ru/specialists/bulletins-nkcki/705877 · Nota de Segurança
• https://errata.altlinux.org/ALT-PU-2024-16794 · Aviso do Fabricante