Visual Studio .Net
Vendor:
First CVE: Aug 6, 2004 · Active for 21 years
29
Total CVEs
More Total CVEs than 96% of tracked products
3.2
Avg CVEs / Year
Higher CVE frequency than 81% of tracked products
8.5
Avg CVSS
Higher Avg CVSS than 75% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Visual Studio .Net over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 6, 2004
21 years ago
Most Recent CVE
Apr 8, 2021
1,933 days ago
CVE Severity & Scoring
Visual Studio .Net29 CVEs
10%
90%
All CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local3 (10.3%)
Network3 (10.3%)
Unknown23 (79.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (17.2%)
High1 (3.4%)
Unknown23 (79.3%)
User Interaction
None2 (6.9%)
Unknown23 (79.3%)
Required4 (13.8%)
Privileges Required
Low1 (3.4%)
High0 (0.0%)
None5 (17.2%)
Unknown23 (79.3%)
Top CVEs
Signals from CVEs in this product scope (29 CVEs).
29 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-3704HIGH Heap-based buffer overflow in the MaskedEdit ActiveX control in Msmask32.ocx 6.0.81.69, and possibly other versions before 6.0.84.18, in Microsoft Visual Studio 6.0, Visual Basic 6 | Aug 18, 2008 | 9.3 | 72 | NO | YES |
CVE-2009-1534HIGH Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and Visu | Aug 12, 2009 | 9.3 | 70 | NO | YES |
CVE-2004-0200HIGH Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via | Sep 28, 2004 | 9.3 | 68 | NO | YES |
CVE-2004-0204HIGH Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2 | Aug 6, 2004 | 7.5 | 68 | NO | YES |
CVE-2005-2127HIGH Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedd | Aug 19, 2005 | 7.5 | 66 | NO | YES |
CVE-2008-4255HIGH Heap-based buffer overflow in mscomct2.ocx (aka Windows Common ActiveX control or Microsoft Animation ActiveX control) in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 an | Dec 10, 2008 | 9.3 | 63 | NO | YES |
CVE-2006-4704MEDIUM Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote att | Nov 1, 2006 | 6.8 | 58 | NO | YES |
CVE-2006-6133HIGH Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business Ob | Nov 28, 2006 | 7.6 | 57 | NO | YES |
CVE-2009-0901HIGH The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold, and Visual C++ 2005 SP1 and 2008 Gold and SP1; and Windows 2000 SP | Jul 29, 2009 | 8.8 | 44 | NO | NO |
CVE-2013-3129HIGH Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP | Jul 10, 2013 | 7.8 | 43 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (29 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
3 CVEs
10.3% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
9 CVEs
31.0% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (29 CVEs).
Media Mentions
Signals from CVEs in this product scope (29 CVEs).
Top CNAs Publishing CVEs For Visual Studio .Net
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| gold | 1 | 7.5 | 63.7% | 0 | 1 |
| 2005 | 10 | 8.3 | 29.6% | 0 | 3 |
| 2003 | 25 | 8.7 | 33.5% | 0 | 6 |
| 2002 | 11 | 8.8 | 35.6% | 0 | 5 |
| 2000 | 1 | 9.3 | 36.5% | 0 | 0 |