Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visual_studio:2005:sp1:*:*:*:*:*:*

part: a version: 2005 update: sp1

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductVisual Studio (aeafcbc5-ae90-5076-b87e-4062acc6a96b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3146 not_vulnerable 2026-06-08 05:33:50.884870 Details available
The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges.
Published: 2021-04-08T19:46:48.000Z
Updated: 2024-08-03T16:45:51.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1976 vulnerable 2026-06-08 04:58:03.377686 Details available
Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka "Report Viewer Controls XSS Vulnerability."
Published: 2011-08-10T21:16:00.000Z
Updated: 2024-08-06T22:46:00.863Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1280 vulnerable 2026-06-08 04:57:57.485839 Details available
The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability."
Published: 2011-06-16T20:21:00.000Z
Updated: 2024-08-06T22:21:34.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3190 vulnerable 2026-06-08 04:55:13.525052 Details available
Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory during execution of an MFC application such as AtlTraceTool8.exe (aka ATL MFC Trace Tool), as demonstrated by a directory that contains a TRC, cur, rs, rct, or res file, aka "MFC Insecure Library Loading Vulnerability."
Published: 2010-08-31T19:25:00.000Z
Updated: 2026-05-28T18:28:46.313Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2495 vulnerable 2026-06-08 04:51:28.938990 Details available
The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not properly enforce string termination, which allows remote attackers to obtain sensitive information via a crafted HTML document with an ATL (1) component or (2) control that triggers a buffer over-read, related to ATL headers and buffer allocation, aka "ATL Null String Vulnerability."
Published: 2009-07-29T17:00:00.000Z
Updated: 2026-05-27T15:51:32.827Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2493 vulnerable 2026-06-08 04:51:28.932706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0901 vulnerable 2026-06-08 04:51:11.973909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.