Microsoft Download Center Archive

Update for Microsoft Visual Studio 2013 Update 4 (KB3023304)

  • Published:
  • Version: 12.0
  • Category: Update
  • Language: English

Fix for Git clients issue

This download is to install a fix for Git clients issue that was discovered by the core Git maintainers. The vulnerability allows an attacker to introduce a file into a Git repo named in such a way that when a user downloads the changes in a remote repository the attacker's file silently replaces the user's config file which resides outside of the repository. By replacing this file with a bad file, the attacker can re-map git commands to execute arbitrary commands that run under the user's credentials.

Files

Status: Deleted

This download is no longer available on microsoft.com. The downloads below are archives provided by the Internet Archive Wayback Machine from the Microsoft Download Center prior to April 2023.

Files
TFS2013-KB3023304.exe

    File sizes and hashes are retrieved from the Wayback Machine’s indexes. They may not match the latest versions of files hosted on Microsoft servers.

    System Requirements

    Operating Systems: Windows 8.1, Windows Server 2012, Windows Server 2012 R2, Windows Server 2008 R2, Windows 7 Service Pack 1, Windows 8, Windows Small Business Server 2011 Standard

    Visual Studio Team Foundation Server 2013 with Update 4 applied.

    Installation Instructions

    1. Click the Download button on this page to start the download, or select a different language from the Change language drop-down list and click Change.
    2. Do one of the following:
    • To start the installation immediately, click Run.
    • To save the download to your computer for installation at a later time, click Save.
    • To cancel the installation, click Cancel.
    This page was generated from a snapshot of the Microsoft Download Center made on .
    FamilyId: dfc3b039-f21b-40dd-a04f-60b0a08e0782