Description
A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8)
unspecifiedaffected
Microsoft Microsoft Visual Studio 2017
15.0affected
Microsoft Microsoft Visual Studio 2019
16.0affected
Microsoft Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)
unspecifiedaffected
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1351 ↗
- https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com/ ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html ↗
- https://security.gentoo.org/glsa/202003-30 ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html ↗