KLA11934 Multiple vulnerabilities in Microsoft Developer Tools

🗓️ 11 Aug 2020 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 108 Views

Multiple vulnerabilities in Microsoft Developer Tools, including ASP.NET Core, .NET Framework, Visual Studio Code. Denial of service, arbitrary code execution, privilege escalation

Reporter	Title	Published	Views	Family All 110
ALT Linux	Security fix for the ALT Linux 10 package dotnet-bootstrap-3.1 version 3.1.11-alt1	28 Jan 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package dotnet-bootstrap-3.1 version 3.1.11-alt1	28 Jan 202100:00	–	altlinux
Information Security Automation	Microsoft Patch Tuesday August 2020: vulnerabilities with Detected Exploitation, useful for phishing and others	30 Aug 202022:13	–	avleonov
BDU FSTEC	The vulnerability of Visual Studio Code’s source editor lies in its error handling after a project is opened, allowing an attacker to execute arbitrary code.	20 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ASP.NET Core software platform, related to errors in request processing, allows a hacker to cause a service failure.	20 Aug 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft .NET Framework software platform, related to insecure management of privileges, allows a perpetrator to execute arbitrary code.	2 Sep 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft .NET Framework software lies in its lack of proper input validation, allowing attackers to execute arbitrary code.	2 Sep 202000:00	–	bdu_fstec
Tenable Nessus	CentOS 8 : .NET Core 3.1 (CESA-2020:3422)	1 Feb 202100:00	–	nessus
Tenable Nessus	Fedora 32 : dotnet-build-reference-packages / dotnet3.1 (2020-cad5d17c6d)	14 Sep 202000:00	–	nessus
Tenable Nessus	Security Update for Microsoft Visual Studio Code Maven Extension (August 2020)	11 Aug 202000:00	–	nessus

Source	Link
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1597
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1046
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-0604
portal	www.portal.msrc.microsoft.com/api/security-guidance/en-US/CVE/CVE-2020-1476
threats	www.threats.kaspersky.com/en/product/Microsoft-.NET-Framework/
threats	www.threats.kaspersky.com/en/product/Microsoft-Visual-Studio/
support	www.support.microsoft.com/kb/4571692
support	www.support.microsoft.com/kb/4571694
support	www.support.microsoft.com/kb/4571709
support	www.support.microsoft.com/kb/4571741

02 Apr 2025 00:00Current

8.7High risk

Vulners AI Score8.7

CVSS 3.17.8 - 8.8

CVSS 29.3

EPSS0.06561