CVEvulnerability
CVE-2018-1037
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-04-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-908
Description
An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio.
Affected configurations
• microsoft visual studio 2010
• microsoft visual studio 2012
• microsoft visual studio 2013
• microsoft visual studio 2015
• microsoft visual studio 2017
• microsoft visual studio 2017 15.6.6
• microsoft visual studio 2017 15.7
Related
Weakness · CWE (1)
- CWE-908 Use of Uninitialized Resource weakness
References
- http://www.securityfocus.com/bid/103715 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040664 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1037 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/103715 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040664 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1037 Patch, Vendor Advisory