[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fksjHjfgI67cEIaShrisMIrso1wxHb-aCcZJNw6aUxPk":3,"g5a-ex:microsoft\u002Fvisual_studio_.net@*":120,"g5a-family:microsoft\u002Fvisual_studio_.net":122},{"success":4,"data":5},true,{"product":6,"versions":30,"topVulnerabilitiesByEpss":36,"kevVulnerabilities":97,"seoMetadata":98,"meta":117},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":29},"microsoft","visual_studio_.net",5,29,0,"2021-04-08",[14,18,21,24,27],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2000",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"2002",11,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"2003",27,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"2005",10,{"version":28,"cve_count":16,"kev_count":11,"has_kev":17},"gold","Visual Studio .net by Microsoft is a technology product with 5 tracked versions and 29 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[31,32,33,34,35],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":16,"kev_count":11,"has_kev":17},[37,45,50,57,62,68,73,78,85,90],{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":44},"CVE-2004-0204","Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via \"..\" sequences in the dynamicimag argument to crystalimagehandler.aspx.","2004-08-06",7.5,"v2","High",0.72368,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":41,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":49},"CVE-2005-2127","Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, as originally demonstrated using the (1) DDS Library Shape Control (Msdds.dll) COM object, and other objects including (2) Blnmgrps.dll, (3) Ciodm.dll, (4) Comsvcs.dll, (5) Danim.dll, (6) Htmlmarq.ocx, (7) Mdt2dd.dll (as demonstrated using a heap corruption attack with uninitialized memory), (8) Mdt2qd.dll, (9) Mpg4ds32.ax, (10) Msadds32.ax, (11) Msb1esen.dll, (12) Msb1fren.dll, (13) Msb1geen.dll, (14) Msdtctm.dll, (15) Mshtml.dll, (16) Msoeacct.dll, (17) Msosvfbr.dll, (18) Mswcrun.dll, (19) Netshell.dll, (20) Ole2disp.dll, (21) Outllib.dll, (22) Psisdecd.dll, (23) Qdvd.dll, (24) Repodbc.dll, (25) Shdocvw.dll, (26) Shell32.dll, (27) Soa.dll, (28) Srchui.dll, (29) Stobject.dll, (30) Vdt70.dll, (31) Vmhelper.dll, and (32) Wbemads.dll, aka a variant of the \"COM Object Instantiation Memory Corruption vulnerability.\"","2005-08-19",0.63665,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":42,"severity":55,"isKev":17,"epssScore":56},"CVE-2008-3704","Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allows remote attackers to execute arbitrary code via a long Mask parameter, related to not \"validating property values with boundary checks,\" as exploited in the wild in August 2008, aka \"Masked Edit Control Memory Corruption Vulnerability.\"","2008-08-18",9.3,"Critical",0.55917,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":54,"cvssVersion":42,"severity":55,"isKev":17,"epssScore":61},"CVE-2008-4255","Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2, and Office Project 2003 SP3 and 2007 Gold and SP1 allows remote attackers to execute arbitrary code via an AVI file with a crafted stream length, which triggers an \"allocation error\" and memory corruption, aka \"Windows Common AVI Parsing Overflow Vulnerability.\"","2008-12-10",0.53703,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":42,"severity":43,"isKev":17,"epssScore":67},"CVE-2006-6133","Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Objects Crystal Reports XI Professional) allows user-assisted remote attackers to execute arbitrary code via a crafted RPT file.","2006-11-28",7.6,0.5197,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":54,"cvssVersion":42,"severity":55,"isKev":17,"epssScore":72},"CVE-2009-1534","Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visual Studio .NET 2003 SP1 allows remote attackers to execute arbitrary code via crafted property values, aka \"Office Web Components Buffer Overflow Vulnerability.\"","2009-08-12",0.5161,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":54,"cvssVersion":42,"severity":55,"isKev":17,"epssScore":77},"CVE-2004-0200","Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.","2004-09-28",0.49024,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":42,"severity":83,"isKev":17,"epssScore":84},"CVE-2006-4704","Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka \"WMI Object Broker Vulnerability.\"","2006-11-01",6.8,"Medium",0.45595,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":54,"cvssVersion":42,"severity":55,"isKev":17,"epssScore":89},"CVE-2007-0025","The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption. NOTE: this might be due to a stack-based buffer overflow in the AfxOleSetEditMenu function in MFC42u.dll.","2007-02-13",0.36732,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":95,"severity":43,"isKev":17,"epssScore":96},"CVE-2009-0901","The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2; does not prevent VariantClear calls on an uninitialized VARIANT, which allows remote attackers to execute arbitrary code via a malformed stream to an ATL (1) component or (2) control, related to ATL headers and error handling, aka \"ATL Uninitialized Object Vulnerability.\"","2009-07-29",8.8,"v3.1",0.36608,[],{"title":99,"metaDescription":100,"keywords":101,"structuredData":102},"Visual Studio .net by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Visual Studio .net by Microsoft covering 5 versions with 29 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Visual Studio .net vulnerabilities, Visual Studio .net security, Visual Studio .net CVE, Microsoft Visual Studio .net, Visual Studio .net threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":103,"@type":104,"name":105,"description":100,"url":106,"manufacturer":107,"applicationCategory":111,"softwareVersion":112,"mainEntity":113},"https:\u002F\u002Fschema.org","SoftwareApplication","Visual Studio .net","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fvisual_studio_.net",{"@type":108,"name":109,"url":110},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","5 versions tracked",{"@type":114,"name":115,"description":116,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Visual Studio .net Security Vulnerabilities","Security vulnerabilities affecting Visual Studio .net by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":118,"apiVersion":119},"2026-10-17T21:28:57.236Z","3.0",{"rows":121,"total":11,"capped":17,"failed":11},[],[]]