CVE-2021-28953

2021-03-2105:15:12

Google

osv.dev

c/c++ advanced lint

visual studio code

arbitrary binaries

crafted repository

vulnerability

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

34.9%

JSON

The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository.

References

github.com/jbenden/vscode-c-cpp-flylint/compare/v1.8.2...v1.9.0

marketplace.visualstudio.com/items?itemName=jbenden.c-cpp-flylint

vuln.ryotak.me/advisories/16