Microsoft Download Center Archive

Update for Microsoft Visual Studio 2013 (KB3023302)

  • Published:
  • Version: 12.0
  • Category: Update
  • Language: English

Fix for Git clients issue

  • This download is to install a fix for Git clients issue that was discovered by the core Git maintainers. The vulnerability allows an attacker to introduce a file into a Git repo named in such a way that when a user downloads the changes in a remote repository the attacker's file silently replaces the user's config file which resides outside of the repository. By replacing this file with a bad file, the attacker can re-map git commands to execute arbitrary commands that run under the user's credentials.

Files

Status: Live

This download is still available on microsoft.com. The downloads below will come directly from the Microsoft Download Center.

FileSHA1 HashSize
TFS2013-KB3023302.exe9fd4207e3bea968f307e01017dfdb82bb04f2b702.52 MB

File sizes and hashes are retrieved from the Wayback Machine’s indexes. They may not match the latest versions of files hosted on Microsoft servers.

System Requirements

Operating Systems: Windows 7 Service Pack 1, Windows 8, Windows 8.1, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, Windows Small Business Server 2011 Standard

  • Visual Studio Team Foundation Server 2013.

Installation Instructions

    1. Click the Download button on this page to start the download, or select a different language from the Change language drop-down list and click Change.
    2. Do one of the following:
      • To start the installation immediately, click Run.
      • To save the download to your computer for installation at a later time, click Save.
      • To cancel the installation, click Cancel.

Related Resources