Visual Studio .net (Microsoft) - vulnerabilities (CVEs)
27 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2013-07-10. Vendor: Microsoft.
CVEs of Visual Studio .net
- CVE-2013-3129 - CVSS 7.8 (high), 2013-07-10: Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and…
- CVE-2010-3190 - CVSS 7.8 (high), 2010-08-31: Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008…
- CVE-2009-2502 - CVSS 8.1 (high), 2009-10-14: Buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and…
- CVE-2009-2528 - CVSS 9.3 (critical), 2009-10-14: GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary…
- CVE-2009-2501 - CVSS 9.3 (critical), 2009-10-14: Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System…
- CVE-2009-2504 - CVSS 9.3 (critical), 2009-10-14: Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows…
- CVE-2009-2500 - CVSS 9.3 (critical), 2009-10-14: Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and…
- CVE-2009-2503 - CVSS 9.3 (critical), 2009-10-14: GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1…
- CVE-2009-3126 - CVSS 9.3 (critical), 2009-10-14: Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and…
- CVE-2009-2496 - CVSS 9.3 (critical), 2009-08-12: Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003…
- CVE-2009-2495 - CVSS 6.5 (medium), 2009-07-29: The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008…
- CVE-2009-0901 - CVSS 8.8 (high), 2009-07-29: The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and…
- CVE-2008-4256 - CVSS 8.5 (high), 2008-12-10: The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not…
- CVE-2008-4252 - CVSS 8.5 (high), 2008-12-10: The DataGrid ActiveX control in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to…
- CVE-2008-4255 - CVSS 9.3 (critical), 2008-12-10: Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual…
- CVE-2008-4254 - CVSS 8.5 (high), 2008-12-10: Multiple integer overflows in the Hierarchical FlexGrid ActiveX control (mshflxgd.ocx) in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and…
- CVE-2008-4253 - CVSS 8.5 (high), 2008-12-10: The FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, Office FrontPage 2002 SP3, and Office Project 2003 SP3…
- CVE-2008-3704 - CVSS 9.3 (critical), 2008-08-18: Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual…
- CVE-2007-1201 - CVSS 9.3 (critical), 2008-03-11: Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via…
- CVE-2007-1512 - CVSS 10 (critical), 2007-03-20: Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 Gold and SP1, and…
- CVE-2007-0025 - CVSS 9.3 (critical), 2007-02-13: The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote…
- CVE-2006-6133 - CVSS 7.6 (high), 2006-11-28: Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1…
- CVE-2006-4704 - CVSS 6.8 (medium), 2006-11-01: Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio…
- CVE-2006-0187 - CVSS 5.1 (medium), 2006-01-12: By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserControl1_Load function), which allows…
- CVE-2005-2127 - CVSS 7.5 (high), 2005-08-19: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via…
- CVE-2004-0200 - CVSS 9.3 (critical), 2004-09-28: Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to…
- CVE-2004-0204 - CVSS 7.5 (high), 2004-08-06: Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio…
