Microsoft Visual Studio 'asm' Remote Memory Corruption Vulnerability

Bugtraq ID:	108122
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Apr 30 2019 12:00AM
Updated:	Apr 30 2019 12:00AM
Credit:	HexKitchen.
Vulnerable:	Microsoft Visual Studio 2017 0 Microsoft Visual Studio 2013 0 Microsoft Visual Studio 2010 0 Microsoft Visual Studio 2008 0 Microsoft Visual Studio 2005 Microsoft Visual Studio 2015 Microsoft Visual Studio 2012
Not Vulnerable:

Microsoft Visual Studio 'asm' Remote Memory Corruption Vulnerability

Microsoft Visual Studio is prone to a remote memory-corruption vulnerability.

Attackers can exploit this issue to execute arbitrary code on the system. Failed attacks will cause denial of service conditions.

Microsoft Visual Studio 'asm' Remote Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Visual Studio 'asm' Remote Memory Corruption Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Microsoft Visual Studio 'asm' Remote Memory Corruption Vulnerability

References:

• (0Day) Microsoft Visual Studio asm Memory Corruption Remote Code Execution Vulne (Zero Day Initiative)
  
• Microsoft Homepage (Microsoft)