Not rated

CVE-2019-1349 A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for…

Description

A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)	Versions not published
Microsoft Visual Studio 2017	15.0	No fix stated
Microsoft Visual Studio 2019	16.0	No fix stated
Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)	Versions not published

References

portal.msrc.microsoft.com portal.msrc.microsoft.com
public-inbox.org public-inbox.org
openSUSE-SU-2020:0123 lists.opensuse.org
RHSA-2020:0228 access.redhat.com
GLSA-202003-30 security.gentoo.org
openSUSE-SU-2020:0598 lists.opensuse.org

Timeline

Published January 24, 2020
Last modified August 4, 2024

The 12 CVEs of Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) →

CVE-2020-1161 A denial of service vulnerability exists when ASP.NET Core improperly handles web requests Not rated CVE-2020-1108 A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests Not rated CVE-2020-0899 An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file… Not rated CVE-2020-0900 An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles… Not rated

Track this CVE