CVE-2023-36042
EUVD-2023-4002614.11.2023, 18:15
Visual Studio Denial of Service VulnerabilityEnginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microsoft | visual_studio_2019 | 16.0 ≤ 𝑥 < 16.11.32 |
| microsoft | visual_studio_2022 | 17.2 ≤ 𝑥 < 17.2.22 |
| microsoft | visual_studio_2022 | 17.4 ≤ 𝑥 < 17.4.14 |
| microsoft | visual_studio_2022 | 17.6 ≤ 𝑥 < 17.6.10 |
| microsoft | visual_studio_2022 | 17.7 ≤ 𝑥 < 17.7.7 |
𝑥
= Vulnerable software versions
Windows Releases
Common Weakness Enumeration
- CWE-122 - Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.