PT-2019-6384 · Microsoft+3 · Visual Studio+3

Nicolas Joly · Published 2019-12-10 · Updated 2024-06-15 · CVE-2019-1350

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio (affected versions not specified)

Description The issue is related to insufficient input validation in Microsoft Visual Studio, allowing a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2019-3258

ALT-PU-2019-3259

BDU:2023-06455

CVE-2019-1350

MGASA-2019-0391

OPENSUSE-SU-2020:0123-1

OPENSUSE-SU-2020:0598-1

OPENSUSE-SU-2020_0123-1

OPENSUSE-SU-2020_0598-1

OPENSUSE-SU-2024:10786-1

OPENSUSE-SU-2024:10943-1

SUSE-SU-2019:3311-1

SUSE-SU-2020:0045-1

SUSE-SU-2020:1121-1

USN-4220-1

Affected Products

Alt Linux

Visual Studio

Suse

Ubuntu

References · 103

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/git_submodule_url_exec.rb · Exploit
• 🔥 https://github.com/Rogdham/CVE-2018-11235 · Exploit
• 🔥 https://github.com/brompwnie/cve-2020-5260 · Exploit
• 🔥 https://github.com/CHYbeta/CVE-2018-11235-DEMO · Exploit
• 🔥 https://github.com/sv3nbeast/CVE-2020-5260 · Exploit
• 🔥 https://github.com/AnonymKing/CVE-2018-17456 · Exploit
• 🔥 https://github.com/qweraqq/CVE-2018-11235-Git-Submodule-CE · Exploit
• https://osv.dev/vulnerability/USN-4220-1 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-1350 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-1349 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4220-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-1350 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1350 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10786-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-1350 · Security Note