CVE-2019-0657
CVE-2019-0657
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 4.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
06 Mar 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's, aka '.NET Framework and Visual Studio Spoofing Vulnerability'.
Affected products
Microsoft · Microsoft .NET Framework 2.0Microsoft · Microsoft .NET Framework 3.0Microsoft · Microsoft .NET Framework 3.5Microsoft · Microsoft .NET Framework 3.5.1Microsoft · Microsoft .NET Framework 4.5.2Microsoft · Microsoft .NET Framework 4.6Microsoft · Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2Microsoft · Microsoft .NET Framework 4.6/4.6.1/4.6.2Microsoft · Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2Microsoft · Microsoft .NET Framework 4.7.1/4.7.2Microsoft · Microsoft .NET Framework 4.7.2Microsoft · Microsoft .NET Framework 4.7/4.7.1/4.7.2Microsoft · Microsoft Visual StudioMicrosoft · Microsoft Visual Studio 2017Microsoft · .NET CoreMicrosoft · PowerShell Core