Microsoft Visual Studio Add-In Vulnerability (CVE-2012-0008)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: MEDIUM

  CVE Identifier: CVE-2012-0008,MS12-0021

  Advisory Date: JUL 21, 2015

---

  DESCRIPTION

Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability." nvd: Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  AFFECTED SOFTWARE AND VERSION

• microsoft visual_studio 2008
• microsoft visual_studio 2010