Description of the security update for the remote code execution vulnerability in Visual Studio 2012 Update 5: July 10, 2018

2020-03-09T15:56:45
ID KB4336946
Type mskb
Reporter Microsoft
Modified 2020-03-18T17:05:12

Description

<html><body><p>Resolves a vulnerability in Visual Studio.</p><h2></h2><div class="alert-band"><div class="alert alert-info" role="alert"><p class="alert-title"><strong>Notice</strong></p><div class="row"><div class="col-xs-24"><p><span><span>Starting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS.</span></span></p></div></div></div></div><h2>Summary</h2><div class="kb-summary-section section">A remote code execution vulnerability exists in Visual Studio software if the software does not check the source markup of a file for an unbuilt project.<br/><br/>To learn more about the vulnerability, go to <a data-content-id="" data-content-type="" href="https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2018-8172" id="kb-link-2" managed-link="" target="_blank"> CVE-2018-8172</a>.</div><h2>How to obtain and install the update</h2><h3>Method 1: Microsoft Download</h3><div class="kb-collapsible kb-collapsible-expanded"><p>The following file is available for download:<br/><br/><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/> <a data-content-id="" data-content-type="" href="https://aka.ms/vs/11/release/4336946" managed-link="" target="_blank">Download the hotfix package now.</a></p></div><h3 class="sbody-h3">Method 2: Microsoft Update Catalog</h3><div class="kb-collapsible kb-collapsible-expanded">To get the standalone package for this update, go to the <a href="http://catalog.update.microsoft.com/v7/site/search.aspx?q=4336946" id="kb-link-14" target="_self">Microsoft Update Catalog</a> website.</div><h2>Deployment information</h2>For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:<br/> <div class="indent"> <a href="https://support.microsoft.com/en-us/help/20180710" id="kb-link-9">Security update deployment information: July 10, 2018</a></div><h2>More information</h2><p><strong>Prerequisites</strong></p><p>To apply this security update, you must have <a data-content-id="" data-content-type="" href="https://aka.ms/vs/11/docs/2012_Update5" managed-link="" target="_blank">Visual Studio 2012 Update 5</a> installed.</p><div class="kb-moreinformation-section section"><table class="faq-section" faq-section=""><tbody class="faq-panel"><tr><td faq-panel-heading=""><span class="bold btn-link">How to obtain help and support for this security update</span></td></tr><tr><td faq-panel-body=""><div class="kb-collapsible kb-collapsible-collapsed"><span>Help for protecting your Windows-based computer from viruses and malware: <a href="https://support.microsoft.com/contactus/cu_sc_virsec_master" id="kb-link-17" target="_self">Microsoft Secure</a><br/>Local support according to your country: <a href="https://www.microsoft.com/en-us/locale.aspx" id="kb-link-18" target="_self">International Support</a></span></div><span> </span></td></tr></tbody></table><a class="bookmark" id="fileinfo"></a></div><h2>File information</h2><table class="faq-section" faq-section=""><tbody class="faq-panel"><tr><td faq-panel-heading="">File hash information</td></tr><tr><td faq-panel-body=""><table class="table"><tbody><tr><th>File name</th><th>SHA1 hash</th><th>SHA256 hash</th></tr><tr><td>VS11-KB4336946.exe</td><td>73D016E1CA2690CA034D2B49690E09858EC3E523</td><td>170FD3B0A979308994DAA19CCBB483E88F0324559CF0C3CB0656F858CD59603D</td></tr></tbody></table></td></tr></tbody></table><p><strong>File information</strong><br/><br/><span>The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files. </span></p><p><strong>Note</strong> The CAB, MSI, and MSP files also contain binaries that are not listed individually.</p><table class="faq-section" faq-section=""><tbody class="faq-panel"><tr><td faq-panel-heading="">For VS11-KB4336946.exe</td></tr><tr><td faq-panel-body=""><table class="table"><tbody><tr><th>File name</th><th>File version</th><th>File size</th><th>Date</th><th>Time</th><th>Platform</th></tr><tr><td>Vs11-kb4336946.msp</td><td>Not applicable</td><td>6,135,808</td><td>20-Jun-2018</td><td>07:39</td><td>Not applicable</td></tr><tr><td>Preparation.exe</td><td>11.0.61236.400</td><td>101,472</td><td>20-Jun-2018</td><td>02:09</td><td>x86</td></tr><tr><td>Kb4340544.msp</td><td>Not applicable</td><td>1,044,480</td><td>19-Jun-2018</td><td>18:22</td><td>Not applicable</td></tr><tr><td>Admindeployment.xsd</td><td>Not applicable</td><td>3,131</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Bootstrapperapplicationdata.xml</td><td>Not applicable</td><td>14,050</td><td>20-Jun-2018</td><td>07:39</td><td>Not applicable</td></tr><tr><td>Bootstrappercore.config</td><td>Not applicable</td><td>897</td><td>29-Jan-2018</td><td>21:16</td><td>Not applicable</td></tr><tr><td>Bootstrappercore.dll</td><td>3.6.3408.0</td><td>73,728</td><td>09-Oct-2012</td><td>14:52</td><td>x86</td></tr><tr><td>Highcontrastthemes.xaml</td><td>Not applicable</td><td>5,892</td><td>29-Jan-2018</td><td>21:16</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>2,129</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>42,011</td><td>19-Jun-2018</td><td>18:44</td><td>Not applicable</td></tr><tr><td>Managedux.dll</td><td>11.0.61236.400</td><td>542,864</td><td>20-Jun-2018</td><td>02:09</td><td>x86</td></tr><tr><td>Manifest.xml</td><td>Not applicable</td><td>34,220</td><td>20-Jun-2018</td><td>07:39</td><td>Not applicable</td></tr><tr><td>Mbahost.dll</td><td>3.6.3408.0</td><td>77,312</td><td>09-Oct-2012</td><td>14:52</td><td>x86</td></tr><tr><td>Mbapreq.dll</td><td>3.6.3408.0</td><td>129,536</td><td>09-Oct-2012</td><td>14:52</td><td>x86</td></tr><tr><td>Mbapreq.png</td><td>Not applicable</td><td>797</td><td>05-Jul-2012</td><td>15:50</td><td>Not applicable</td></tr><tr><td>Mbapreq.thm</td><td>Not applicable</td><td>3,356</td><td>05-Jul-2012</td><td>15:50</td><td>Not applicable</td></tr><tr><td>Mbapreq.wxl</td><td>Not applicable</td><td>1,972</td><td>05-Jul-2012</td><td>15:50</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Sqmapi.dll</td><td>6.1.7600.16385</td><td>196,416</td><td>19-Jun-2018</td><td>18:33</td><td>x86</td></tr><tr><td>Themes.xaml</td><td>Not applicable</td><td>4,213</td><td>29-Jan-2018</td><td>21:16</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>4,284</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>40,814</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>2,769</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>45,111</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>3,459</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>45,779</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>19,679</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>46,185</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>19,855</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>44,502</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>21,364</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>51,391</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>25,809</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>45,700</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>2,474</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>45,816</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>2,321</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>44,229</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>6,182</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>57,741</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>3,379</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>44,185</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>5,304</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>40,749</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>License.htm</td><td>Not applicable</td><td>2,832</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Localizablestrings.xml</td><td>Not applicable</td><td>45,199</td><td>20-Jun-2018</td><td>02:22</td><td>Not applicable</td></tr><tr><td>Skuresources.xaml</td><td>Not applicable</td><td>12,444</td><td>19-Jun-2018</td><td>18:48</td><td>Not applicable</td></tr><tr><td>Info.ico</td><td>Not applicable</td><td>2,862</td><td>29-Jan-2018</td><td>21:16</td><td>Not applicable</td></tr><tr><td>Stop.ico</td><td>Not applicable</td><td>2,862</td><td>29-Jan-2018</td><td>21:16</td><td>Not applicable</td></tr><tr><td>Warn.ico</td><td>Not applicable</td><td>2,862</td><td>29-Jan-2018</td><td>21:16</td><td>Not applicable</td></tr></tbody></table></td></tr></tbody></table></body></html>