Not rated
CVE-2020-0884 A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka…
Description
A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) | Versions not published | |
| Microsoft Visual Studio 2019 | 16.0 | No fix stated |
| Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
The 12 CVEs of Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) →
CVE-2020-1161
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests
Not rated
CVE-2020-1108
A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests
Not rated
CVE-2020-0900
An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles…
Not rated
CVE-2020-0899
An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file…
Not rated