Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2020-0789

Опубликовано: 10 мар. 2020
Источник: msrc
EPSS Низкий

Описание

Visual Studio Extension Installer Service Denial of Service Vulnerability

A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links. An attacker who successfully exploited the vulnerability could cause a target system to stop responding.

To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would allow an attacker to overwrite system files.

The update addresses the vulnerability by correcting how the Visual Studio Extension Installer Service handles hard links.

Обновления

ПродуктСтатьяОбновление
Microsoft Visual Studio 2019 version 16.0
Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 53%
0.00304
Низкий

Связанные уязвимости

CVSS3: 7.1
nvd
почти 6 лет назад

A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service Denial of Service Vulnerability'.

github
больше 3 лет назад

A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service Denial of Service Vulnerability'.

CVSS3: 7.1
fstec
почти 6 лет назад

Уязвимость службы установки расширений Visual Studio Extension Installer Service средства разработки программного обеспечения Visual Studio, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 53%
0.00304
Низкий