Microsoft .NET Framework and Visual Studio CVE-2019-0657 Spoofing Vulnerability

Bugtraq ID:	106890
Class:	Input Validation Error
CVE:	CVE-2019-0657
Remote:	Yes
Local:	No
Published:	Feb 12 2019 12:00AM
Updated:	Feb 21 2019 05:00AM
Credit:	Jonathan Birch of Microsoft Corporation
Vulnerable:	Microsoft Visual Studio 2017 15.9 Microsoft Visual Studio 2017 0 Microsoft PowerShell Core 6.2 Microsoft PowerShell Core 6.1 Microsoft .NET Framework 4.7.2 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.0 Microsoft .NET Framework 2.0 Microsoft .NET Core 2.2 Microsoft .NET Core 2.1 Microsoft .NET Core 1.1 Microsoft .NET Core 1.0
Not Vulnerable:

Microsoft .NET Framework and Visual Studio CVE-2019-0657 Spoofing Vulnerability

Microsoft .NET Framework and Visual Studio are prone to an security vulnerability that may allow attackers to conduct spoofing attacks.

An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible.

Microsoft .NET Framework and Visual Studio CVE-2019-0657 Spoofing Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft .NET Framework and Visual Studio CVE-2019-0657 Spoofing Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft .NET Framework and Visual Studio CVE-2019-0657 Spoofing Vulnerability

References:

• Microsoft Security Advisory CVE-2019-0657: PowerShell Core Domain Spoofing Vuln (PowerShell)
  
• Microsoft Homepage (Microsoft)
  
• CVE-2019-0657 | .NET Framework and Visual Studio Spoofing Vulnerability (Microsoft)