CVE-2019-0657

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

Score

CVSS 3.0 5.9 Medium

Status

Modified - secure@microsoft.com

Published

2019-03-05

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• .net Core (Microsoft)
• .net Framework (Microsoft)
• Microsoft .net Framework 2.0 (Microsoft)
• Microsoft .net Framework 3.0 (Microsoft)
• Microsoft .net Framework 3.5 (Microsoft)
• Microsoft .net Framework 3.5.1 (Microsoft)
• Microsoft .net Framework 4.5.2 (Microsoft)
• Microsoft .net Framework 4.6 (Microsoft)
• Microsoft .net Framework 4.6.24.74.7.14.7.2 (Microsoft)
• Microsoft .net Framework 4.64.6.14.6.2 (Microsoft)
• Microsoft .net Framework 4.64.6.14.6.24.74.7.14.7.2 (Microsoft)
• Microsoft .net Framework 4.7.14.7.2 (Microsoft)
• Microsoft .net Framework 4.7.2 (Microsoft)
• Microsoft .net Framework 4.74.7.14.7.2 (Microsoft)
• Microsoft Visual Studio (Microsoft)
• Microsoft Visual Studio 2017 (Microsoft)
• Powershell Core (Microsoft)
• Visual Studio 2017 (Microsoft)

References

• http://www.securityfocus.com/bid/106890
• https://access.redhat.com/errata/RHSA-2019:0349
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657