CVE-2019-1079
Description
An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka Visual Studio Information Disclosure Vulnerability.
Risk Information
Base Score
6.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
25.343
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Visual Studio Information Disclosure Vulnerability for the information disclosure vulnerability in Microsoft Visual Studio 2010 Service Pack 1 (KB4506161) | Windows |
| Visual Studio Information Disclosure Vulnerability for the information disclosure vulnerability in Microsoft Visual Studio 2013 Update 5 (KB4506163) | Windows |
| Visual Studio Information Disclosure Vulnerability for the information disclosure vulnerability in Microsoft Visual Studio 2012 Update 5 (KB4506162) | Windows |
| Visual Studio Information Disclosure Vulnerability for the information disclosure vulnerability in Microsoft Visual Studio 2015 Update 3 (KB4506164) | Windows |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-27172 | Security update for the information disclosure vulnerability in Microsoft Visual Studio 2010 Service Pack 1 (KB4506161) |
| PATCH-27184 | Security update for the information disclosure vulnerability in Microsoft Visual Studio 2013 Update 5 (KB4506163) |
| PATCH-27173 | Security update for the information disclosure vulnerability in Microsoft Visual Studio 2012 Update 5 (KB4506162) |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234