4.3

CVE-2018-1037

An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Visual Studio Version 2010 Update sp1
Microsoft ≫ Visual Studio Version 2012 Update update5
Microsoft ≫ Visual Studio Version 2013 Update update5
Microsoft ≫ Visual Studio Version 2015 Update update3
Microsoft ≫ Visual Studio Version 2017
Microsoft ≫ Visual Studio 2017 Version 15.6.6
Microsoft ≫ Visual Studio 2017 Version 15.7 Edition preview
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.93% 0.927
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

http://www.securityfocus.com/bid/103715
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040664
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1037
Patch
Vendor Advisory