CVE-2019-0728

Опубликовано: 05 мар. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Средний

Описание

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'.

Ссылки

http://seclists.org/fulldisclosure/2019/Apr/38
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/04/30/4
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/106913
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0728
Patch
Vendor Advisory
http://seclists.org/fulldisclosure/2019/Apr/38
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/04/30/4
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/106913
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0728
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:visual_studio_code:-:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.11573

Средний

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2019-0728

msrc

больше 6 лет назад

Visual Studio Code Remote Code Execution Vulnerability

GHSA-9hfq-hpxq-hq7w

CVSS3: 7.8

github

больше 3 лет назад