CVE-2019-1079

Description

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'.

Affected products

• Microsoft / Microsoft Visual Studio2010 Service Pack 1 – 2010 Service Pack 1
• Microsoft / Microsoft Visual Studio2012 Update 5 – 2012 Update 5
• Microsoft / Microsoft Visual Studio2013 Update 5 – 2013 Update 5
• Microsoft / Microsoft Visual Studio2015 Update 3 – 2015 Update 3

References

• VENDOR_ADVISORYhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1079