Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-29698
HistoryApr 16, 2023 - 12:00 a.m.

Microsoft Visual Studio Spoofing Vulnerability (CNVD-2023-29698)

2023-04-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
18

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Microsoft Visual Studio is a family of development tools from Microsoft Corporation (USA), and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft Visual Studio is vulnerable to a spoofing vulnerability that can be exploited by attackers with specially crafted websites to spoof content and trick users into believing the site is legitimate, in combination with other vulnerabilities in the web service to launch an attack.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N