{"id":6701,"date":"2018-08-22T16:35:11","date_gmt":"2018-08-22T14:35:11","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=6701"},"modified":"2018-08-22T16:35:11","modified_gmt":"2018-08-22T14:35:11","slug":"vulnerabilities-in-microsoft-visual-c-runtime","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2018\/08\/22\/vulnerabilities-in-microsoft-visual-c-runtime\/","title":{"rendered":"Vulnerabilities in Microsoft Visual C++ Runtime"},"content":{"rendered":"

[German<\/a>]Here is another hint to vulnerabilities buried in software packages from Microsoft. The Visual C++ runtime packages (VC redistributable) provided by Microsoft are assembled to installer packages with outdated (vulnerable) WiX Toolkit versions. <\/p>\n

<\/p>\n

What are the Visual C++ Runtime?<\/h2>\n

\"\"A Visual C++ runtime environment, the VC runtime, is required for Visual C++ programs. Microsoft offers various versions of its Visual C++ Runtime environment as redistributable packages for Windows. A list of VC redistributable versions for Windows can be found at this Microsoft page<\/a>. So far so good – maybe apart from the fact that users often have trouble with these packages, there is more in stock. <\/p>\n

Old stuff: Vulnerability in Visual C++ Runtime?<\/h2>\n

Unfortunately, the Visual C++ runtime packages seem to be a security night mare. Today I was reminded via Twitter<\/a> on my old article series I published in December 2017. <\/p>\n

\n

The problem with C++ Redists & 3rd Party security patches \u2013 I to III<\/p>\n

Posted on 2017-12-19 by @etguenni<\/a>https:\/\/t.co\/yAvtB8Ionl<\/a>https:\/\/t.co\/DDQvWwKeW2<\/a>https:\/\/t.co\/4tT7fFXoiu<\/a><\/p>\n

\u2014 Crysta T. Lacey (@PhantomofMobile) 22. August 2018<\/a><\/p><\/blockquote>\n