CVE-2017-0160

Опубликовано: 12 апр. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Средний

Описание

Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Remote Code Execution Vulnerability."

Ссылки

http://www.securityfocus.com/bid/97447
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038236
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0160
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/41903/
http://www.securityfocus.com/bid/97447
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038236
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0160
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/41903/

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.21605

Средний

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2017-0160

msrc

около 8 лет назад

.NET Framework Remote Code Execution Vulnerability

GHSA-fp95-p83c-7h99