This post has been republished via RSS; it originally appeared at: MSRC Security Update Guide.
Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network.