Microsoft Download Center Archive

Update for Microsoft Visual Studio 2013 Update 4 (KB3023304)

  • Published:
  • Version: 12.0
  • Category: Update
  • Language: English

Fix for Git clients issue

  • This download is to install a fix for Git clients issue that was discovered by the core Git maintainers. The vulnerability allows an attacker to introduce a file into a Git repo named in such a way that when a user downloads the changes in a remote repository the attacker's file silently replaces the user's config file which resides outside of the repository. By replacing this file with a bad file, the attacker can re-map git commands to execute arbitrary commands that run under the user's credentials.

Files

Status: Live

This download is still available on microsoft.com. The downloads below will come directly from the Microsoft Download Center.

FileSize
TFS2013-KB3023304.exe
SHA1: d75776834afa2898d76436620503ae9053fbd0dc
2.75 MB

File sizes and hashes are retrieved from the Wayback Machine’s indexes. They may not match the latest versions of files hosted on Microsoft servers.

System Requirements

Operating Systems: Windows 7 Service Pack 1, Windows 8, Windows 8.1, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Small Business Server 2011 Standard

  • Visual Studio Team Foundation Server 2013 with Update 4 applied.

Installation Instructions

    1. Click the Download button on this page to start the download, or select a different language from the Change language drop-down list and click Change.
    2. Do one of the following:
      • To start the installation immediately, click Run.
      • To save the download to your computer for installation at a later time, click Save.
      • To cancel the installation, click Cancel.

Related Resources