Not rated
CVE-2019-0613 A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to…
Description
A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft .NET Framework 4.5.2 | Versions not published | |
| Microsoft .NET Framework 4.6 | Versions not published | |
| Microsoft Visual Studio | 2017 | No fix stated |
| Microsoft .NET Framework 4.7.2 | Versions not published | |
| Microsoft .NET Framework 4.6/4.6.1/4.6.2 | Versions not published | |
| Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 | Versions not published | |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | Versions not published | |
| Microsoft .NET Framework 4.7/4.7.1/4.7.2 | Versions not published | |
| Microsoft .NET Framework 4.7.1/4.7.2 | Versions not published |
Show the 5 other branches Hide the 5 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2017 | Versions not published | |
| Microsoft .NET Framework 3.5 | Versions not published | |
| Microsoft .NET Framework 3.0 | Versions not published | |
| Microsoft .NET Framework 2.0 | Versions not published | |
| Microsoft .NET Framework 3.5.1 | Versions not published |
References
- 106872 www.securityfocus.com
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft .NET Framework 4.5.2
The 19 CVEs of Microsoft .NET Framework 4.5.2 →
CVE-2022-26832
.NET Framework Denial of Service Vulnerability
7.5
High
CVE-2022-21911
.NET Framework Denial of Service Vulnerability
7.5
High
CVE-2020-16937
<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory
4.7
Medium
CVE-2020-1476
An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow…
Not rated