CVE-2018-1037
Description
An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka Microsoft Visual Studio Information Disclosure Vulnerability. This affects Microsoft Visual Studio.
Risk Information
Base Score
4.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS Score
Exploitation Probability
9.465
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| VP9 Video Extensions Remote Code Execution Vulnerability for the information disclosure vulnerability in Visual Studio 2013 Update 5 (KB4089283) | Windows |
| Vulnerabilities CVE-2018-1037 are affected in Microsoft Visual Studio Community 2017 15.6.6 | Windows |
| Vulnerabilities CVE-2018-1037 are affected in Microsoft Visual Studio Enterprise 2017 15.6.6 | Windows |
| Vulnerabilities CVE-2018-1037 are affected in Microsoft Visual Studio Professional 2017 15.6.6 | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-26921 | Security update for the information disclosure vulnerability in Visual Studio 2013 Update 5 (KB4089283) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234