CVE-2019-0537

Description

An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent file, aka Microsoft Visual Studio Information Disclosure Vulnerability. This affects Microsoft Visual Studio.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
26.918

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Visual Studio Information Disclosure Vulnerability for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1 (KB4476698)Windows
Microsoft Visual Studio Information Disclosure Vulnerability for the information disclosure vulnerability in Visual Studio 2012 Update 5 (KB4476755)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-26017Security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1 (KB4476698)
PATCH-26016Security update for the information disclosure vulnerability in Visual Studio 2012 Update 5 (KB4476755)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234