Lucene search

K
mskbMicrosoftKB4506161
HistoryJul 09, 2019 - 7:00 a.m.

Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2010 Service Pack 1: July 9, 2019

2019-07-0907:00:00
Microsoft
support.microsoft.com
98

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.019 Low

EPSS

Percentile

88.5%

Description of the security update for the information disclosure vulnerability in Microsoft Visual Studio 2010 Service Pack 1: July 9, 2019

NoticeStarting on March 10, 2020, Microsoft Update is now offering this security update to additional versions of the Windows OS.

Note This security update applies to Visual Studio 2010 Service Pack 1 except for Visual Studio Isolated and Integrated Shells.

Summary

An information disclosure vulnerability exists when Microsoft Visual Studio 2010 incorrectly parses XML input in certain settings files.To learn more about the vulnerability, see CVE-2019-1079.

Known issues in this update

Symptom
Visual Studio 2010 customers may experience issues that affect the offering of this update through Microsoft Update. In some cases, this update is offered to products for which the update was not intended or needed, such as Visual Studio Isolated and Integrated Shells.

Status
On August 5, 2019, a detection revision was made to address issues that affect the Microsoft Update offering for this update. Customers who observed unexpected issues in the offering of this update can rescan Microsoft Update for the latest content within their Windows Server Update Services (WSUS) and update management environments. Customers who rely on the Wsusscan2.cab file will receive this revision as part of the August 2019 broad Windows Update releases.

How to obtain and install the update

Method 1: Microsoft Download

The following file is available for download:DownloadDownload the hotfix package now.

Method 2: Microsoft Update Catalog

To get the standalone package for this update, go to the Microsoft Update Catalog website.

More information

Prerequisites

To apply this security update, you must have Visual Studio 2010 Service Pack 1 installed.

Restart requirement

You may have to restart the computer after you apply this security update if an instance of Visual Studio is being used.

Security update replacement information

This security update doesn’t replace other security updates.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:Security update deployment information: July 9, 2019

File hash information

File name SHA1 hash SHA256 hash
VS10-KB4506161-x86.exe 11E1F5E1FC0B34A657015949794E59C378E2B5D6 0E65F4E6538AAD8F0D710005A493AE0E07193877241EE15A1203F258285DE98C

File informationThe English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

__

VS10-KB4506161-x86.exe file information

File name File version File size Date Time Platform
Dhtmlheader.html Not applicable 16,118 21-Jun-2019 03:18 Not applicable
Header.bmp Not applicable 7,308 21-Jun-2019 15:21 Not applicable
Setup.exe 10.0.40219.505 79,040 21-Jun-2019 03:22 x86
Setupengine.dll 10.0.40219.505 810,160 21-Jun-2019 03:22 x86
Setupui.dll 10.0.40219.505 296,112 21-Jun-2019 03:22 x86
Setupui.xsd Not applicable 30,120 21-Jun-2019 03:18 Not applicable
Splashscreen.bmp Not applicable 196,662 21-Jun-2019 15:21 Not applicable
Sqmapi.dll 6.0.6000.16386 144,416 21-Jun-2019 01:41 x86
Vs10-kb4506161.msp Not applicable 41,725,952 21-Jun-2019 15:21 Not applicable
Watermark.bmp Not applicable 325,760 21-Jun-2019 15:21 Not applicable
Eula.rtf Not applicable 2,060 21-Jun-2019 15:21 Not applicable
Localizeddata.xml Not applicable 28,064 21-Jun-2019 15:21 Not applicable
Setupresources.dll 10.0.40219.505 15,024 21-Jun-2019 03:35 x86
Eula.rtf Not applicable 1,307 21-Jun-2019 15:21 Not applicable
Localizeddata.xml Not applicable 38,260 21-Jun-2019 15:21 Not applicable
Setupresources.dll 10.0.40219.505 19,632 21-Jun-2019 03:35 x86
Eula.rtf Not applicable 1,015 21-Jun-2019 15:21 Not applicable
Localizeddata.xml Not applicable 35,954 21-Jun-2019 15:21 Not applicable
Setupresources.dll 10.0.40219.505 18,096 21-Jun-2019 03:22 x86
Eula.rtf Not applicable 1,206 21-Jun-2019 15:21 Not applicable
Localizeddata.xml Not applicable 37,998 21-Jun-2019 15:21 Not applicable
Setupresources.dll 10.0.40219.505 19,632 21-Jun-2019 03:35 x86
Eula.rtf Not applicable 1,244 21-Jun-2019 15:21 Not applicable
Localizeddata.xml Not applicable 37,346 21-Jun-2019 15:21 Not applicable
Setupresources.dll 10.0.40219.505 19,120 21-Jun-2019 03:35 x86
Eula.rtf Not applicable 2,882 21-Jun-2019 15:21 Not applicable
Localizeddata.xml Not applicable 31,236 21-Jun-2019 15:21 Not applicable
Setupresources.dll 10.0.40219.505 16,560 21-Jun-2019 03:35 x86
Eula.rtf Not applicable 3,723 21-Jun-2019 15:21 Not applicable
Localizeddata.xml Not applicable 30,320 21-Jun-2019 15:21 Not applicable
Setupresources.dll 10.0.40219.505 16,048 21-Jun-2019 03:35 x86
Eula.rtf Not applicable 3,219 21-Jun-2019 15:21 Not applicable
Localizeddata.xml Not applicable 37,872 21-Jun-2019 15:21 Not applicable
Setupresources.dll 10.0.40219.505 19,632 21-Jun-2019 03:35 x86
Eula.rtf Not applicable 1,932 21-Jun-2019 15:21 Not applicable
Localizeddata.xml Not applicable 28,038 21-Jun-2019 15:21 Not applicable
Setupresources.dll 10.0.40219.505 15,024 21-Jun-2019 03:35 x86
Eula.rtf Not applicable 1,197 21-Jun-2019 15:21 Not applicable
Localizeddata.xml Not applicable 37,468 21-Jun-2019 15:21 Not applicable
Setupresources.dll 10.0.40219.505 19,632 21-Jun-2019 03:35 x86
Print.ico Not applicable 1,150 21-Jun-2019 03:18 Not applicable
Rotate1.ico Not applicable 894 21-Jun-2019 03:18 Not applicable
Rotate2.ico Not applicable 894 21-Jun-2019 03:18 Not applicable
Rotate3.ico Not applicable 894 21-Jun-2019 03:18 Not applicable
Rotate4.ico Not applicable 894 21-Jun-2019 03:18 Not applicable
Rotate5.ico Not applicable 894 21-Jun-2019 03:18 Not applicable
Rotate6.ico Not applicable 894 21-Jun-2019 03:18 Not applicable
Rotate7.ico Not applicable 894 21-Jun-2019 03:18 Not applicable
Rotate8.ico Not applicable 894 21-Jun-2019 03:18 Not applicable
Save.ico Not applicable 1,150 21-Jun-2019 03:18 Not applicable
Setup.ico Not applicable 36,710 21-Jun-2019 03:18 Not applicable
Stop.ico Not applicable 10,134 21-Jun-2019 03:18 Not applicable
Sysreqmet.ico Not applicable 1,150 21-Jun-2019 03:18 Not applicable
Sysreqnotmet.ico Not applicable 1,150 21-Jun-2019 03:18 Not applicable
Warn.ico Not applicable 10,134 21-Jun-2019 03:18 Not applicable

How to get help and support for this security updateHelp for installing updates: Protect yourself online

Help for protecting your Windows-based computer from viruses and malware: Microsoft Security

Local support according to your country: International Support

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.019 Low

EPSS

Percentile

88.5%