Description of the security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1: January 8, 2019

2019-01-0808:00:00

Microsoft

support.microsoft.com

5.5 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.0%

JSON

Description of the security update for the information disclosure vulnerability in Visual Studio 2010 Service Pack 1: January 8, 2019

NoticeStarting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS.

Summary

An information disclosure vulnerability exists if Microsoft Visual Studio incorrectly discloses arbitrary file contents if the victim opens a malicious .vscontent file.

To learn more about the vulnerability, see CVE-2019-0537.

How to obtain and install the update

Method 1: Microsoft Download

The following file is available for download:

Download the hotfix package now.

Method 2: Microsoft Update Catalog

To get the standalone package for this update, go to the Microsoft Update Catalog website.

More information

PrerequisitesTo apply this security update, you must have Visual Studio 2010 Service Pack 1 installed.Restart requirementYou may have to restart the computer after you apply this security update if an instance of Visual Studio is being used.Security update replacement informationThis security update doesn’t replace other security updates.

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.