Description
A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.
Affected products
- Microsoft / Expression Blend 4Service Pack 3 – Service Pack 3
- Microsoft / Microsoft Visual Studio2012 Update 5 – 2012 Update 5
- Microsoft / Microsoft Visual Studio2013 Update 5 – 2013 Update 5
- Microsoft / Microsoft Visual Studio2015 Update 3 – 2015 Update 3
- Microsoft / Microsoft Visual Studio2010 Service Pack 1 – 2010 Service Pack 1
- Microsoft / Microsoft Visual Studio2017 Version 15.7.5 – 2017 Version 15.7.5
- Microsoft / Microsoft Visual Studio2017 Version 15.8 Preview – 2017 Version 15.8 Preview
- Microsoft / Microsoft Visual Studio2017 – 2017