CVE-2019-0613

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'.

Score

CVSS 3.0 8.8 High

Status

Modified - secure@microsoft.com

Published

2019-03-05

Last modified

2024-08-04

Weaknesses

CWE-119

Affected products

• .net Framework (Microsoft)
• Microsoft .net Framework 2.0 (Microsoft)
• Microsoft .net Framework 3.0 (Microsoft)
• Microsoft .net Framework 3.5 (Microsoft)
• Microsoft .net Framework 3.5.1 (Microsoft)
• Microsoft .net Framework 4.5.2 (Microsoft)
• Microsoft .net Framework 4.6 (Microsoft)
• Microsoft .net Framework 4.6.24.74.7.14.7.2 (Microsoft)
• Microsoft .net Framework 4.64.6.14.6.2 (Microsoft)
• Microsoft .net Framework 4.64.6.14.6.24.74.7.14.7.2 (Microsoft)
• Microsoft .net Framework 4.7.14.7.2 (Microsoft)
• Microsoft .net Framework 4.7.2 (Microsoft)
• Microsoft .net Framework 4.74.7.14.7.2 (Microsoft)
• Microsoft Visual Studio (Microsoft)
• Microsoft Visual Studio 2017 (Microsoft)
• Visual Studio 2017 (Microsoft)

References

• http://www.securityfocus.com/bid/106872
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0613