GCVE - cpe:2.3:a:microsoft:visual_studio:2010:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visual_studio:2010:*:*:*:*:*:*:*

part: a version: 2010 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Visual Studio (`aeafcbc5-ae90-5076-b87e-4062acc6a96b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-3802`	vulnerable	2026-06-08 05:05:42.778624	Details available msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file. Published: 2014-05-20T23:00:00.000Z Updated: 2024-08-06T10:57:17.127Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/67398 http://zerodayinitiative.com/advisories/ZDI-14-129/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0008`	vulnerable	2026-06-08 04:59:35.548430	Details available Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability." Published: 2012-03-13T21:00:00.000Z Updated: 2024-08-06T18:09:17.136Z Open on db.gcve.eu Reference links http://secunia.com/advisories/48396 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-021 https://exchange.xforce.ibmcloud.com/vulnerabilities/73537 http://www.securityfocus.com/bid/52329 http://www.us-cert.gov/cas/techalerts/TA12-073A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1280`	vulnerable	2026-06-08 04:57:57.487247	Details available The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability." Published: 2011-06-16T20:21:00.000Z Updated: 2024-08-06T22:21:34.188Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/48196 http://www.securitytracker.com/id?1025647 http://www.securitytracker.com/id?1025648 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-049 http://www.securitytracker.com/id?1025646	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.