PT-2012-3630 · Microsoft · Visual Studio Team Foundation Server

Sunil Yadav · Published 2012-09-11 · Updated 2018-10-12 · CVE-2012-1892

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio Team Foundation Server 2010 SP1

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. This could potentially lead to unauthorized actions on the affected system.

Recommendations For Microsoft Visual Studio Team Foundation Server 2010 SP1, update to a version that includes the fix for this issue to prevent exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2012-1892

Affected Products

Visual Studio Team Foundation Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-1892 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-061 · Vendor Advisory
• http://securitytracker.com/id?1027511 · Note
• http://us-cert.gov/cas/techalerts/TA12-255A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15779 · Note
• http://securityfocus.com/bid/55409 · Note
• http://secunia.com/advisories/50463 · Note