ByteOS Network

NVD Vulnerability Details :

CVE-2019-1079

Analyzed

Source-secure@microsoft.com

Published At-15 Jul, 2019 | 19:15

Updated At-24 Aug, 2020 | 17:37

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N

CPE Matches

Microsoft Corporation

>>visual_studio>>2010

cpe:2.3:a:microsoft:visual_studio:2010:sp1:*:*:*:*:*:*

Microsoft Corporation

>>visual_studio>>2012

cpe:2.3:a:microsoft:visual_studio:2012:update_5:*:*:*:*:*:*

Microsoft Corporation

>>visual_studio>>2013

cpe:2.3:a:microsoft:visual_studio:2013:update_5:*:*:*:*:*:*

Microsoft Corporation

>>visual_studio>>2015

cpe:2.3:a:microsoft:visual_studio:2015:update_3:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079	secure@microsoft.com	Patch Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History