CVE-2016-0148

Опубликовано: 12 апр. 2016

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."

Ссылки

http://packetstormsecurity.com/files/136671/.NET-Framework-4.6-DLL-Hijacking.html
http://seclists.org/fulldisclosure/2016/Apr/42
Mailing List
Third Party Advisory
http://www.securityfocus.com/archive/1/538063/100/0/threaded
http://www.securitytracker.com/id/1035535
Third Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-16-234
Third Party Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-041
http://packetstormsecurity.com/files/136671/.NET-Framework-4.6-DLL-Hijacking.html
http://seclists.org/fulldisclosure/2016/Apr/42
Mailing List
Third Party Advisory
http://www.securityfocus.com/archive/1/538063/100/0/threaded
http://www.securitytracker.com/id/1035535
Third Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-16-234
Third Party Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-041

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07287

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2016-0148

msrc

около 9 лет назад

.NET Framework Remote Code Execution Vulnerability

GHSA-c286-rjqc-8qxh