PT-2024-9435 · Microsoft+4 · Visual Studio+5

CVE-2024-43498

·

Published

2024-11-12

·

Updated

2024-12-10

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: .NET and Visual Studio (affected versions not specified)
Description: The issue is related to errors in data type conversion in Microsoft Visual Studio and the .NET platform. Exploitation of this issue may allow a remote attacker to execute arbitrary code.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Type Confusion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-843

Related Identifiers

ALSA-2024:9543
ALT-PU-2024-16705
BDU:2024-11130
BIT-DOTNET-2024-43498
BIT-DOTNET-SDK-2024-43498
CVE-2024-43498
GHSA-8RXM-6783-QH55
GHSA-V7VF-F5Q6-M899
INFSA-2024_9543
RHSA-2024:9543
RHSA-2024_9543
USN-7105-1

Affected Products

.Net Framework
Alt Linux
Almalinux
Red Hat
Ubuntu
Visual Studio