CVE-2019-1354: Input Validation
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1352, CVE-2019-1387.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1354?
CVE-2019-1354 has been classified as a critical severity vulnerability due to the risk of remote code execution.
How do I fix CVE-2019-1354?
To remediate CVE-2019-1354, users should update to the latest version of Microsoft Visual Studio 2017 or 2019 as recommended by Microsoft.
Which software is affected by CVE-2019-1354?
CVE-2019-1354 affects Microsoft Visual Studio 2017 versions up to 15.9.18 and Visual Studio 2019 up to 16.4.1.
What type of vulnerability is CVE-2019-1354?
CVE-2019-1354 is categorized as a remote code execution vulnerability.
Can CVE-2019-1354 be exploited remotely?
Yes, CVE-2019-1354 can be exploited remotely, allowing attackers to execute arbitrary code on the affected systems.