CVE:CVE-2018-14878
CNNVD:CNNVD-201808-325
JetBrains dotPeek和ReSharper Ultimate都是捷克JetBrains公司的产品。JetBrains dotPeek是一款适用于.NET语言的反编译工具。ReSharper Ultimate是一款代码生成工具。
JetBrains dotPeek 2018.2之前版本和ReSharper Ultimate 2018.1.4之前版本中存在安全漏洞，该漏洞源于程序反序列化了不可信的数据。攻击者可借助编译的.NET对象（例如DLL或EXE文件）利用该漏洞执行代码。
solution:Upgrade jetbrains dotpeek to a higher version than 2018.2,and avoid the version (,2018.2); Upgrade jetbrains resharper_ultimate to a higher version than 2018.1.4,and avoid the version (,2018.1.4]