description: A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an unbuilt project, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio, Expression Blend 4.
problem types: Remote Code Execution
affected:
{
product: Microsoft Visual Studio
vendor: Microsoft
versions:
status: affected, version: 2010 Service Pack 1
status: affected, version: 2012 Update 5
status: affected, version: 2013 Update 5
status: affected, version: 2015 Update 3
status: affected, version: 2017
status: affected, version: 2017 Version 15.7.5
status: affected, version: 2017 Version 15.8 Preview
}
{
product: Expression Blend 4
vendor: Microsoft
versions:
status: affected, version: Service Pack 3
}
