Skip to content
OpenAdvisories
High · 7.8 CVE-2022-24767 EUVD-2022-29593

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

Published Apr 12, 2022 · Updated Oct 1, 2024 · Assigned by GitHub_M

Vendor: Microsoft Product: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Product: Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) Product: Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) Product: Microsoft Visual Studio 2022 version 17.0 Product: Microsoft Visual Studio 2022 version 17.1

Description

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) unspecified —
Microsoft Microsoft Visual Studio 2022 version 17.1 unspecified —
Microsoft Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6) unspecified —
Microsoft Microsoft Visual Studio 2019 version 16.9 (includes 16.0 - 16.8) unspecified —
Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) unspecified —
Microsoft Microsoft Visual Studio 2022 version 17.0 unspecified —

References