Microsoft heeft versie 15.7.5 van Visual Studio 2017 uitgebracht. Deze populaire programmeerontwikkelomgeving beschikt over handige opties om het programmeren in onder andere Visual C++, Visual Basic, C#, F#, Python, en R makkelijker te maken. De hele waslijst met veranderingen van de 2017-uitgave kun je nalezen in de bijbehorende releasenotes. De wijzigingen van deze uitgave zien er als volgt uit:
Top Issues Fixed in 15.7.5
These are the customer-reported issues addressed in 15.7.5:Visual Studio 2017 version 15.7 Security Advisory Notices
- VS2017 15.7.0 Community debugger not showing variable values on hover.
- Exception block is optimized away causing a crash.
- cannot push to remote repository since update from 15.7.2 to 15.7.3.
- Sync commit: Git failed with a fatal error.
- Compiler bug related to math operations on NaN not conforming to standards, when optimization is enabled.
- Optimization error in x86 build reorders lines incorrectly.
Visual Studio Remote Code Execution Vulnerability (CVE-2018-8172)
A remote code execution vulnerability that can lead to exploitation of a user's machine by opening a specially crafted project, or resource file. The security update addresses the vulnerability by correcting how Visual Studio checks the source markup of a file. For more information, see Microsoft Security Response Center article (CVE-2018-8172).
.NET Framework Remote Code Execution Vulnerability (CVE-2018-8260)
A remote code execution vulnerability exists in .NET software which can lead to exploitation of a user's machine by allowing attackers to run arbitrary code in the context of the current user. The security update addresses the vulnerability by correcting how .NET checks the source markup of a file. For more information, see Microsoft Security Response Center article (CVE-2018-8260).
.NET Microsoft Macro Assembler Tampering Vulnerability (CVE-2018-8232)
Tampering vulnerability related to the Microsoft Macro Assembler improperly validating code. The security update addresses the vulnerability by ensuring that Microsoft Macro Assembler properly validates code logic. For more information, see Microsoft Security Response Center article (CVE-2018-8232).
ASP.NET Core Security Feature Bypass Vulnerability (CVE-2018-8171)
An ASP.NET Core Security Feature Bypass Vulnerability exists when the number of incorrect login attempts is not validated that can lead to an attacker trying infinite authentication attempts. The update addresses the vulnerability by validating the number of incorrect login attempts. For more information, see Microsoft Security Response Center (CVE-2018-8171).
:strip_exif()/i/2004776764.png?f=thumbmedium)
:strip_exif()/i/2001502127.png?f=thumbmedium)
/u/466919/Tweakers_p9_v2.png?f=community){kind=small}
:strip_icc():strip_exif()/u/140143/krabsla_64x64.jpg?f=community){kind=small}
:strip_icc():strip_exif()/u/116001/crop5db1ffa2442b3_cropped.jpeg?f=community){kind=small}
:strip_icc():strip_exif()/u/140697/crop6180fb9103afa_cropped.jpg?f=community){kind=small}