Description
A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Microsoft Visual Studio
2010 Service Pack 1affected2012 Update 5affected2013 Update 5affected2015 Update 3affected2017affected2017 Version 15.7.5affected2017 Version 15.8 Previewaffected
Microsoft Expression Blend 4
Service Pack 3affected