Description of the security update for the remote code execution vulnerability in Visual Studio 2010 Service Pack 1: July 10, 2018

NoticeStarting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS.

Summary

A remote code execution vulnerability exists in Visual Studio software if the software does not check the source markup of a file for an unbuilt project.

To learn more about the vulnerability, go to CVE-2018-8172.

How to obtain and install the update

Method 1: Microsoft DownloadThe following file is available for download:

Download the hotfix package now.

Method 2: Microsoft Update Catalog

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: July 10, 2018

More information

PrerequisitesTo apply this security update, you must have Visual Studio 2010 Service Pack 1 installed.

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files. Note The CAB, MSI, and MSP files also contain binaries that are not listed individually.

How to obtain help and support for this security update

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure
Local support according to your country: International Support

File information

File hash information

File name	SHA1 hash	SHA256 hash
VS10SP1-KB4336919-x86.exe	73BA45EA657CCD6766921984DF6503D42866BC36	866373B39D1CE7BC5B5FFABB47B62C50766D5CF12CED059D163B9EE5D8CE14CD

For VS10SP1-KB4336919-x86.exe

File name	File version	File size	Date	Time	Platform
Dhtmlheader.html	Not applicable	16,118	04-Jul-2018	18:24	Not applicable
Header.bmp	Not applicable	7,308	05-Jul-2018	12:01	Not applicable
Parameterinfo.xml	Not applicable	268,786	05-Jul-2018	12:01	Not applicable
Setup.exe	10.0.40219.493	78,992	04-Jul-2018	18:25	x86
Setupengine.dll	10.0.40219.493	810,136	04-Jul-2018	18:25	x86
Setupui.dll	10.0.40219.493	296,080	04-Jul-2018	18:25	x86
Setupui.xsd	Not applicable	30,120	04-Jul-2018	18:24	Not applicable
Splashscreen.bmp	Not applicable	196,662	05-Jul-2018	12:01	Not applicable
Sqmapi.dll	6.0.6000.16386	144,416	04-Jul-2018	17:51	x86
Strings.xml	Not applicable	13,606	05-Jul-2018	12:01	Not applicable
Uiinfo.xml	Not applicable	38,096	05-Jul-2018	12:01	Not applicable
Vs10sp1-kb4336919.msp	Not applicable	28,381,184	05-Jul-2018	12:00	Not applicable
Watermark.bmp	Not applicable	325,760	05-Jul-2018	12:01	Not applicable
sfx_manifest	Not applicable	76	05-Jul-2018	12:01	Not applicable
Eula.rtf	Not applicable	2,060	05-Jul-2018	12:01	Not applicable
Localizeddata.xml	Not applicable	28,064	05-Jul-2018	12:01	Not applicable
Setupresources.dll	10.0.40219.493	15,008	04-Jul-2018	18:27	x86
Eula.rtf	Not applicable	1,307	05-Jul-2018	12:01	Not applicable
Localizeddata.xml	Not applicable	38,260	05-Jul-2018	12:01	Not applicable
Setupresources.dll	10.0.40219.493	19,616	04-Jul-2018	18:27	x86
Eula.rtf	Not applicable	1,015	05-Jul-2018	12:01	Not applicable
Localizeddata.xml	Not applicable	35,954	05-Jul-2018	12:01	Not applicable
Setupresources.dll	10.0.40219.493	18,080	04-Jul-2018	18:25	x86
Eula.rtf	Not applicable	1,206	05-Jul-2018	12:01	Not applicable
Localizeddata.xml	Not applicable	37,998	05-Jul-2018	12:01	Not applicable
Setupresources.dll	10.0.40219.493	19,616	04-Jul-2018	18:27	x86
Eula.rtf	Not applicable	1,244	05-Jul-2018	12:01	Not applicable
Localizeddata.xml	Not applicable	37,346	05-Jul-2018	12:01	Not applicable
Setupresources.dll	10.0.40219.493	19,104	04-Jul-2018	18:27	x86
Eula.rtf	Not applicable	2,882	05-Jul-2018	12:01	Not applicable
Localizeddata.xml	Not applicable	31,236	05-Jul-2018	12:01	Not applicable
Setupresources.dll	10.0.40219.493	16,544	04-Jul-2018	18:27	x86
Eula.rtf	Not applicable	3,723	05-Jul-2018	12:01	Not applicable
Localizeddata.xml	Not applicable	30,320	05-Jul-2018	12:01	Not applicable
Setupresources.dll	10.0.40219.493	16,032	04-Jul-2018	18:27	x86
Eula.rtf	Not applicable	3,219	05-Jul-2018	12:01	Not applicable
Localizeddata.xml	Not applicable	37,872	05-Jul-2018	12:01	Not applicable
Setupresources.dll	10.0.40219.493	19,616	04-Jul-2018	18:27	x86
Eula.rtf	Not applicable	1,932	05-Jul-2018	12:01	Not applicable
Localizeddata.xml	Not applicable	28,038	05-Jul-2018	12:01	Not applicable
Setupresources.dll	10.0.40219.493	15,008	04-Jul-2018	18:27	x86
Eula.rtf	Not applicable	1,197	05-Jul-2018	12:01	Not applicable
Localizeddata.xml	Not applicable	37,468	05-Jul-2018	12:01	Not applicable
Setupresources.dll	10.0.40219.493	19,616	04-Jul-2018	18:27	x86
Print.ico	Not applicable	1,150	04-Jul-2018	18:24	Not applicable
Rotate1.ico	Not applicable	894	04-Jul-2018	18:24	Not applicable
Rotate2.ico	Not applicable	894	04-Jul-2018	18:24	Not applicable
Rotate3.ico	Not applicable	894	04-Jul-2018	18:24	Not applicable
Rotate4.ico	Not applicable	894	04-Jul-2018	18:24	Not applicable
Rotate5.ico	Not applicable	894	04-Jul-2018	18:24	Not applicable
Rotate6.ico	Not applicable	894	04-Jul-2018	18:24	Not applicable
Rotate7.ico	Not applicable	894	04-Jul-2018	18:24	Not applicable
Rotate8.ico	Not applicable	894	04-Jul-2018	18:24	Not applicable
Save.ico	Not applicable	1,150	04-Jul-2018	18:24	Not applicable
Setup.ico	Not applicable	36,710	04-Jul-2018	18:24	Not applicable
Stop.ico	Not applicable	10,134	04-Jul-2018	18:24	Not applicable
Sysreqmet.ico	Not applicable	1,150	04-Jul-2018	18:24	Not applicable
Sysreqnotmet.ico	Not applicable	1,150	04-Jul-2018	18:24	Not applicable
Warn.ico	Not applicable	10,134	04-Jul-2018	18:24	Not applicable