CVE-2019-1425: Medium severity visual studio professional 2017 vulnerability
Published Nov 12, 2019
·Updated
An elevation of privilege vulnerability exists when Visual Studio fails to properly validate hardlinks while extracting archived files, aka 'Visual Studio Elevation of Privilege Vulnerability'.
Affected Software
3 affected components
Microsoft Visual Studio 2017=15.9
Microsoft Visual Studio 2019=16.0
Microsoft Visual Studio 2019=16.3
Remediation
Event History
Nov 12, 2019
CVE Published
via MITRE·06:53 PM
Data Sourced
via MITRE·06:53 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-1425?
CVE-2019-1425 is an elevation of privilege vulnerability in Visual Studio.
2
How does CVE-2019-1425 affect Microsoft Visual Studio?
CVE-2019-1425 affects Microsoft Visual Studio 2017 version 15.9, Microsoft Visual Studio 2019 version 16.0, and Microsoft Visual Studio 2019 version 16.3.
3
What is the severity of CVE-2019-1425?
The severity of CVE-2019-1425 is medium with a CVSS score of 6.5.
4
How can I fix CVE-2019-1425?
To fix CVE-2019-1425, update Microsoft Visual Studio to the latest version.
5
Where can I find more information about CVE-2019-1425?
More information about CVE-2019-1425 can be found at the following link: [CVE-2019-1425](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1425).