5104 matches found
CVE-2019-1211
An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the vulnerability could execute code in the context of another local user. To exploit the vulnerability, an authenticated attacker would ne...
Privilege escalation
An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files, aka 'Git for Visual Studio Elevation of Privilege Vulnerability'...
CVE-2019-1211 Git for Visual Studio Elevation of Privilege Vulnerability
...
CVE-2019-1211
CVE-2019-1211 is an elevation of privilege vulnerability in Git for Visual Studio stemming from improper parsing of Git configuration files. The authenticated attacker could modify configuration files before full installation and then convince another user to run specific Git commands, executing ...
UPDATE: FOCA v3.4.6.0
PenTestIT RSS Feed My last post about this Fingerprinting & Organisation with Collected Archives was almost two year ago. I also mentioned that this tool was open sourced. Now, FOCA v3.4.6.0 has been released! I missed a lot of the older updates to this tool. What is FOCA? FOCA stands for...
Git for Visual Studio Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the vulnerability could execute code in the context of another local user. To exploit the vulnerability, an authenticated attacker would ne...
Microsoft Git for Visual Studio CVE-2019-1211 Local Privilege Escalation Vulnerability
Description Microsoft Git for Visual Studio is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. Technologies Affected Microsoft Visual Studio 2017 15.9 Microsoft Visual Studio 2017 Microsoft Visual Studio 2019 16.0 Microsof...
KLA11657 An elevation of privilege vulnerability in Microsoft Developer Tools
An elevation of privilege vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2019-1211 Related products Microsoft-Visual-Studio CVE list CVE-2019-1211 warning KB list Solution Install necessary updates...
Security Updates for Microsoft Visual Studio Products (August 2019)
The Microsoft Visual Studio Products are missing a security update. It is, therefore, affected by the following vulnerability : - An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. An attacker who successfully exploited the...
PT-2019-2991 · Microsoft · Visual Studio +1
Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Git for Visual Studio affected versions not specified Description: The issue is related to errors in privilege management in the Git component of Microsoft Visual Studio. It allows an...
Security update for the information disclosure vulnerability in Visual Studio 2015 Update 3 (KB4506164)
An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files...
Security update for the information disclosure vulnerability in Visual Studio 2012 Update 5 (KB4506162)
An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files...
Security update for the information disclosure vulnerability in Visual Studio 2013 Update 5 (KB4506163)
An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files...
The vulnerability of the update service for the Microsoft Visual Studio software allows a hacker to modify any files at will.
The vulnerability of the Microsoft Visual Studio software update service is related to privilege management errors. Exploiting this vulnerability could allow an attacker to modify arbitrary files using a specially created application...
The vulnerability of the Microsoft Visual Studio software development tool lies in the incorrect limitation on XML references to external objects, which allows attackers to read arbitrary files.
The vulnerability of the Microsoft Visual Studio software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially created XML file...
Exploit for CVE-2019-0803
这个漏洞属于未正确处理GDI对象导致的UAF类型本地权限提升漏洞 看雪地址 复现环境 1. Windows 7 sp1 64位操作系统 2. 编译环境Visual Studio 2013 引用 360分析 看雪分析 Poc 分析 关于漏洞的成因,以上两篇引用文章对漏洞的成因已经介绍的很详细,这里不再赘述.本文主要分析漏洞复现的调试过程,和漏洞利用方式的讨论. 在poc中先创建大小为0x350的AcceleratorTable,计算公式为: ACCEL WINAPI CreateAcceleratorTableW InreadscAccel LPACCEL paccel,In int...
The vulnerability of the Microsoft.NET Framework software platform and the Visual Studio development environment, related to data processing flaws, allows attackers to execute arbitrary code.
The vulnerability of the Microsoft.NET Framework software platform and the Visual Studio development environment is related to data processing flaws. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...
CVE-2019-1079
An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'...