2 lines
2.7 KiB
JSON
2 lines
2.7 KiB
JSON
{"affected":[{"affectedData":[{"product":"Microsoft Visual Studio 2019","vendor":"Microsoft","versions":[{"status":"affected","version":"16.0"}]},{"product":"Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","matchCriteriaId":"0FEF0A4F-CB6E-4004-8DCE-723877109D7A","versionEndIncluding":"16.4","versionStartIncluding":"16.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual Studio Extension Installer Service Denial of Service Vulnerability'."},{"lang":"es","value":"Existe una vulnerabilidad de denegación de servicio cuando el Visual Studio Extension Installer Service maneja inapropiadamente los enlaces físicos, también se conoce como \"Visual Studio Extension Installer Service Denial of Service Vulnerability\"."}],"id":"CVE-2020-0789","lastModified":"2026-06-17T02:46:37.143","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":6.6,"confidentialityImpact":"NONE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:N/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":9.2,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-03-12T16:15:15.330","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0789"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0789"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-59"}],"source":"nvd@nist.gov","type":"Primary"}]}
|