Unscored CVE-2019-0728 EUVD-2019-1488GHSA-9hfq-hpxq-hq7w

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visu…

Published Mar 6, 2019 · Updated Aug 4, 2024 · Assigned by microsoft

Vendor: Microsoft Product: Visual Studio Code

Description

A remote code execution vulnerability exists in Visual Studio Code when it process environment variables after opening a project, aka 'Visual Studio Code Remote Code Execution Vulnerability'.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Visual Studio Code	unspecified	—

References

106913 vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0728
[oss-security] 20190430 Spoofing OpenPGP and S/MIME Signatures in Emails (multiple clients) mailing-list
20190430 OpenPGP and S/MIME signature forgery attacks in multiple email clients mailing-list