Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka .NET Remote Code Execution Vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| .net_framework | Microsoft | 2.0-sp2 (including) | 2.0-sp2 (including) |
| .net_framework | Microsoft | 3.5 (including) | 3.5 (including) |
| .net_framework | Microsoft | 3.5.1 (including) | 3.5.1 (including) |
| .net_framework | Microsoft | 4.5.2 (including) | 4.5.2 (including) |
| .net_framework | Microsoft | 4.6 (including) | 4.6 (including) |
| .net_framework | Microsoft | 4.6.1 (including) | 4.6.1 (including) |
| .net_framework | Microsoft | 4.6.2 (including) | 4.6.2 (including) |
| .net_framework | Microsoft | 4.7 (including) | 4.7 (including) |
References
- http://www.securityfocus.com/bid/97447
- http://www.securitytracker.com/id/1038236
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0160
- https://www.exploit-db.com/exploits/41903/
- http://www.securityfocus.com/bid/97447
- http://www.securitytracker.com/id/1038236
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0160
- https://www.exploit-db.com/exploits/41903/