VYPR
← All advisories
High severity8.8NVD Advisory· Published Mar 5, 2019· Updated Jun 17, 2026

CVE-2019-0613

CVE-2019-0613

Description

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'.

Affected products

28
  • Microsoft/Microsoft Visual Studio 2017v5
    Range: version 15.9
  • Microsoft/.net Framework23 versions
    cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*+ 22 more
    • cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.0:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*
    • (no CPE)range: Windows 10 Version 1803 for 32-bit Systems
    • (no CPE)range: Windows 10 for 32-bit Systems
    • (no CPE)range: Windows 7 for 32-bit Systems Service Pack 1
    • (no CPE)range: Windows Server 2016
    • (no CPE)range: Windows 10 Version 1703 for 32-bit Systems
    • (no CPE)range: Windows 10 Version 1709 for 32-bit Systems
    • (no CPE)range: Windows Server 2012
    • (no CPE)range: Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2
    • (no CPE)range: Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2
    • (no CPE)range: Windows 7 for 32-bit Systems Service Pack 1
    • (no CPE)range: Windows 7 for 32-bit Systems Service Pack 1
    • (no CPE)range: Windows Server 2008 for 32-bit Systems Service Pack 2
  • Microsoft/Visual Studio 20172 versions
    cpe:2.3:a:microsoft:visual_studio_2017:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:visual_studio_2017:-:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:visual_studio_2017:15.9:*:*:*:*:*:*:*
  • Microsoft/.NET Framework and Visual Studiollm-create
  • Microsoft/Visual Studiocpe-rescue
    Range: 2017

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.