Update for Microsoft Visual Studio 2013 (KB3023302)
Fix for Git clients issue
Important! Selecting a language below will dynamically change the complete page content to that language.
Version:
12.0
Date Published:
18/12/2014
File Name:
TFS2013-KB3023302.exe
File Size:
2.8 MB
This download is to install a fix for Git clients issue that was discovered by the core Git maintainers. The vulnerability allows an attacker to introduce a file into a Git repo named in such a way that when a user downloads the changes in a remote repository the attacker's file silently replaces the user's config file which resides outside of the repository. By replacing this file with a bad file, the attacker can re-map git commands to execute arbitrary commands that run under the user's credentials.Supported Operating Systems
Windows 7 Service Pack 1, Windows 8, Windows 8.1, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Small Business Server 2011 Standard
Visual Studio Team Foundation Server 2013.- Click the Download button on this page to start the download, or select a different language from the Change language drop-down list and click Change.
- Do one of the following:
- To start the installation immediately, click Run.
- To save the download to your computer for installation at a later time, click Save.
- To cancel the installation, click Cancel.