Vulnerabilities > CVE-2012-0008 - Local Privilege Escalation vulnerability in Microsoft Visual Studio 2008/2010

047910
CVSS 6.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
microsoft
nessus
NVD
Published: 2012-03-13
Updated: 2018-10-12

Summary

Untrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability." Per: http://technet.microsoft.com/en-us/security/bulletin/ms12-021 'An attacker could then place a specially crafted add-in in the path used by Visual Studio. When Visual Studio is started by an administrator, the specially crafted add-in would be loaded with the same privileges as the administrator.' 'The vulnerability could not be exploited remotely or by anonymous users.' Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'

Vulnerable Configurations

Part Description Count
Application
Microsoft
3

Msbulletin

bulletin_idMS12-021
bulletin_url
date2012-03-13T00:00:00
impactElevation of Privilege
knowledgebase_id2651019
knowledgebase_url
severityImportant
titleVulnerability in Visual Studio Could Allow Elevation of Privilege

Nessus

NASL familyWindows : Microsoft Bulletins
NASL idSMB_NT_MS12-021.NASL
descriptionThe installed version of Microsoft Visual Studio does not properly validate add-ins in the path before loading them into the application. An attacker can elevate his privileges by placing a specially crafted add-in in the path used by Visual Studio and convincing a user with higher privileges to start Visual Studio.
last seen2020-06-01
modified2020-06-02
plugin id58333
published2012-03-13
reporterThis script is Copyright (C) 2012-2019 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/58333
titleMS12-021: Vulnerability in Visual Studio Could Allow Elevation of Privilege (2651019)

Oval

accepted2014-01-06T04:00:07.092-05:00
classvulnerability
contributors
  • nameJosh Turpin
    organizationSymantec Corporation
  • nameMaria Kedovskaya
    organizationALTX-SOFT
definition_extensions
  • commentMicrosoft Visual Studio 2008 Service Pack 1 is installed
    ovaloval:org.mitre.oval:def:6205
  • commentMicrosoft Visual Studio 2010 is installed
    ovaloval:org.mitre.oval:def:7533
  • commentMicrosoft Visual Studio 2010 Service Pack 1 is installed
    ovaloval:org.mitre.oval:def:14969
descriptionUntrusted search path vulnerability in Microsoft Visual Studio 2008 SP1, 2010, and 2010 SP1 allows local users to gain privileges via a Trojan horse add-in in an unspecified directory, aka "Visual Studio Add-In Vulnerability."
familywindows
idoval:org.mitre.oval:def:15081
statusaccepted
submitted2012-03-13T13:00:00
titleVisual Studio Add-In Vulnerability
version11

Seebug

bulletinFamilyexploit
descriptionBUGTRAQ ID: 52329 CVE ID: CVE-2012-0008 Microsoft Visual Studio（简称VS）是美国微软公司的开发工具包系列产品。 Microsoft Visual Studio从不安全路径加载插件时存在漏洞，通过在某些目录中放置恶意插件，并诱使用户开启VS，本地攻击者可利用此漏洞获取提升的权限。 0 Microsoft Visual Studio 2010 Microsoft Visual Studio 2008 SP1 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS12-021）以及相应补丁: MS12-021：Vulnerability in Visual Studio Could Allow Elevation of Privilege (2651019) 链接：http://www.microsoft.com/technet/security/bulletin/MS12-021.asp
idSSV:30195
last seen2017-11-19
modified2012-03-15
published2012-03-15
reporterRoot
titleMicrosoft Visual Studio Add-In本地权限提升漏洞(MS12-021)

References