Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-8172

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remot

Description

A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft Visual Studio

  • 2010 Service Pack 1affected
  • 2012 Update 5affected
  • 2013 Update 5affected
  • 2015 Update 3affected
  • 2017affected
  • 2017 Version 15.7.5affected
  • 2017 Version 15.8 Previewaffected

Microsoft Expression Blend 4

  • Service Pack 3affected

References