CVE-2019-0613: Buffer Overflow

Published Mar 5, 2019

Updated

A remote code execution vulnerability exists in .NET Framework and Visual Studio software when the software fails to check the source markup of a file.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka '.NET Framework and Visual Studio Remote Code Execution Vulnerability'.

Affected Software

31 affected components

Microsoft .NET Framework=2.0-sp2

Microsoft .NET Framework=3.0-sp2

Microsoft Windows Server 2008=sp2

Microsoft .NET Framework=3.5

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1703

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 8.1

Microsoft Windows Server 2012

Microsoft Windows Server 2012=r2

Microsoft Windows Server 2016

Microsoft Windows Server 2019

Microsoft .NET Framework=3.5.1

Microsoft Windows 7=sp1

Microsoft Windows Server 2008=r2-sp1

Microsoft .NET Framework=4.5.2

Microsoft Windows RT 8.1

Microsoft .NET Framework=4.6

Microsoft .NET Framework=4.6.2

Microsoft .NET Framework=4.7

Microsoft .NET Framework=4.7.1

Microsoft .NET Framework=4.7.2

Microsoft .NET Framework=4.6.1

Microsoft Windows Server 2016=1709

Microsoft Windows Server 2016=1803

Microsoft Visual Studio 2017

Microsoft Visual Studio 2017=15.9

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0613

Event History

Mar 5, 2019

CVE Published

11:29 PM

Mar 6, 2019

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-0613?

CVE-2019-0613 is a remote code execution vulnerability in .NET Framework and Visual Studio software.

What is the severity of CVE-2019-0613?

The severity of CVE-2019-0613 is critical with a CVSS score of 8.8.

Which software is affected by CVE-2019-0613?

CVE-2019-0613 affects .NET Framework 2.0 SP2, .NET Framework 3.0 SP2, and Visual Studio 2017 version 15.9.

How does CVE-2019-0613 exploit work?

CVE-2019-0613 allows an attacker to run arbitrary code in the context of the current user by exploiting a failure to check the source markup of a file.

Where can I find more information about CVE-2019-0613?

More information about CVE-2019-0613 can be found at the following references: [SecurityFocus](http://www.securityfocus.com/bid/106872), [Microsoft Security Advisory](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0613).