Not rated
CVE-2019-0657 A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET…
Description
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft .NET Framework 4.5.2 | Versions not published | |
| Microsoft .NET Framework 4.6 | Versions not published | |
| .NET Core | 2.2 | No fix stated |
| .NET Core | 2.1 | No fix stated |
| .NET Core | 1 | No fix stated |
| Microsoft Visual Studio | 2017 | No fix stated |
| Microsoft .NET Framework 4.7.2 | Versions not published | |
| Microsoft .NET Framework 4.6/4.6.1/4.6.2 | Versions not published | |
| Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 | Versions not published |
Show the 10 other branches Hide the 10 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | Versions not published | |
| Microsoft .NET Framework 4.7/4.7.1/4.7.2 | Versions not published | |
| Microsoft .NET Framework 4.7.1/4.7.2 | Versions not published | |
| PowerShell Core | 6.2 | No fix stated |
| PowerShell Core | 6.1 | No fix stated |
| Microsoft Visual Studio 2017 | Versions not published | |
| Microsoft .NET Framework 3.5 | Versions not published | |
| Microsoft .NET Framework 3.0 | Versions not published | |
| Microsoft .NET Framework 2.0 | Versions not published | |
| Microsoft .NET Framework 3.5.1 | Versions not published |
References
- RHSA-2019:0349 access.redhat.com
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- 106890 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft .NET Framework 4.5.2
The 19 CVEs of Microsoft .NET Framework 4.5.2 →
CVE-2022-26832
.NET Framework Denial of Service Vulnerability
7.5
High
CVE-2022-21911
.NET Framework Denial of Service Vulnerability
7.5
High
CVE-2020-16937
<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory
4.7
Medium
CVE-2020-1476
An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow…
Not rated