Lucene search

[email protected]CVE-2020-16881

HistorySep 11, 2020 - 5:15 p.m.

CVE-2020-16881

2020-09-1117:15:17

[email protected]

web.nvd.nist.gov

910

cve-2020-16881

visual studio

code execution

package.json

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious ‘package.json’ file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, an attacker would need to convince a target to clone a repository and open it in Visual Studio Code. Attacker-specified code would execute when the target opens the malicious ‘package.json’ file.
The update address the vulnerability by modifying the way Visual Studio Code handles JSON files.

Affected configurations

Vulners

NVD

Node

microsoftvisual_studio_codeRange1.0.0–1.0.0

VendorProductVersionCPE
microsoftvisual_studio_code1.0.0cpe:2.3:a:microsoft:visual_studio_code:1.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	visual_studio_code	1.0.0	cpe:2.3:a:microsoft:visual_studio_code:1.0.0:::::::*

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Visual Studio Code",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "1.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]