CVE-2018-8172 A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vul...
HighCVSS 7.8
EPSS 33.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft expression blend | = 2-sp2 | No fix listed |
| Microsoft expression blend | = 3-sp1 | No fix listed |
| Microsoft expression blend | = 4-sp3 | No fix listed |
| Microsoft visual studio | = 2010-sp1 | No fix listed |
| Microsoft visual studio | = 2012-update_5 | No fix listed |
| Microsoft visual studio | = 2013-update_5 | No fix listed |
| Microsoft visual studio | = 2015-update3 | No fix listed |
| Microsoft visual studio 2017 | All versions | No fix listed |
| Microsoft visual studio 2017 | = 15.7.5 | No fix listed |
| Microsoft Visual Studio | = 2010 Service Pack 1 | No fix listed |
| Microsoft Visual Studio | = 2012 Update 5 | No fix listed |
| Microsoft Visual Studio | = 2013 Update 5 | No fix listed |
| Microsoft Visual Studio | = 2015 Update 3 | No fix listed |
| Microsoft Visual Studio | = 2017 | No fix listed |
| Microsoft Visual Studio | = 2017 Version 15.7.5 | No fix listed |
| Microsoft Visual Studio | = 2017 Version 15.8 Preview | No fix listed |
| Microsoft Expression Blend 4 | = Service Pack 3 | No fix listed |
References
- 104616 third-party-advisory vdb-entry
- 1041253 broken-link third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory