CVE-2018-1037 Information

Description

An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files aka \Microsoft Visual Studio Information Disclosure Vulnerability.\ This affects Microsoft Visual Studio.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Reference

http://www.securityfocus.com/bid/103715 http://www.securitytracker.com/id/1040664 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1037

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

LOW

Availability Impact

NONE

Base Score

NONE

Base Severity

4.3