PT-2024-9435 · Microsoft+4 · Visual Studio+5

Published 2024-11-12 · Updated 2024-12-10 · CVE-2024-43498

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio (affected versions not specified)

Description: The issue is related to errors in data type conversion in Microsoft Visual Studio and the .NET platform. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

ALSA-2024:9543

ALT-PU-2024-16705

BDU:2024-11130

BIT-DOTNET-2024-43498

BIT-DOTNET-SDK-2024-43498

CVE-2024-43498

GHSA-8RXM-6783-QH55

GHSA-V7VF-F5Q6-M899

INFSA-2024_9543

RHSA-2024:9543

RHSA-2024_9543

USN-7105-1

Affected Products

.Net Framework

Alt Linux

Almalinux

Red Hat

Ubuntu

Visual Studio

References · 28

• https://osv.dev/vulnerability/GHSA-8rxm-6783-qh55 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-43498 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-11130 · Security Note
• https://linux.oracle.com/errata/ELSA-2024-9543.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43499 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43498 · Security Note
• https://osv.dev/vulnerability/USN-7105-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2024-9543.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:9543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-43498 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7105-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-dotnet-2024-43498 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43498 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-43498 · Security Note
• https://osv.dev/vulnerability/GHSA-v7vf-f5q6-m899 · Vendor Advisory