Not rated
CVE-2019-1352 A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for…
Description
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) | Versions not published | |
| Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) | Versions not published | |
| Microsoft Visual Studio 2017 | 15.0 | No fix stated |
| Microsoft Visual Studio 2019 | 16.0 | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- public-inbox.org public-inbox.org
- openSUSE-SU-2020:0123 lists.opensuse.org
- RHSA-2020:0228 access.redhat.com
- GLSA-202003-30 security.gentoo.org
- openSUSE-SU-2020:0598 lists.opensuse.org
Timeline
- Published
- Last modified
Other CVEs of Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
The 47 CVEs of Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) →
CVE-2021-36952
Visual Studio Remote Code Execution Vulnerability
7.8
High
CVE-2021-26434
Visual Studio Elevation of Privilege Vulnerability
7.8
High
CVE-2021-34532
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
5.5
Medium
CVE-2021-34485
.NET Core and Visual Studio Information Disclosure Vulnerability
5.0
Medium