A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka “Visual Studio Remote Code Execution Vulnerability.” This affects Microsoft Visual Studio, Expression Blend 4.
[
{
"product": "Microsoft Visual Studio",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "2010 Service Pack 1"
},
{
"status": "affected",
"version": "2012 Update 5"
},
{
"status": "affected",
"version": "2013 Update 5"
},
{
"status": "affected",
"version": "2015 Update 3"
},
{
"status": "affected",
"version": "2017"
},
{
"status": "affected",
"version": "2017 Version 15.7.5"
},
{
"status": "affected",
"version": "2017 Version 15.8 Preview"
}
]
},
{
"product": "Expression Blend 4",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "Service Pack 3"
}
]
}
]