CVE-2019-0657

CVE-2019-0657

EPSS 4.5%

A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.

Affected products

Microsoft · Microsoft .NET Framework 2.0 Microsoft · Microsoft .NET Framework 3.0 Microsoft · Microsoft .NET Framework 3.5 Microsoft · Microsoft .NET Framework 3.5.1 Microsoft · Microsoft .NET Framework 4.5.2 Microsoft · Microsoft .NET Framework 4.6 Microsoft · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft · Microsoft .NET Framework 4.6/4.6.1/4.6.2 Microsoft · Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 Microsoft · Microsoft .NET Framework 4.7.1/4.7.2 Microsoft · Microsoft .NET Framework 4.7.2 Microsoft · Microsoft .NET Framework 4.7/4.7.1/4.7.2 Microsoft · Microsoft Visual Studio Microsoft · Microsoft Visual Studio 2017 Microsoft · .NET Core Microsoft · PowerShell Core

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://access.redhat.com/errata/RHSA-2019:0349 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0657 http://www.securityfocus.com/bid/106890