Information Disclosure vulnerability in Microsoft .NET Framework 4.6.2

Description

Mishandling of a developer-supplied key was found in Microsoft .NET 4.6.2 Framework’s Data Provider for SQL Server. By exploiting this vulnerability malicious users can obtain sensitive cleartext information. This vulnerability can be exploited remotely via leveraging key guessability.

Original advisories

• https://technet.microsoft.com/library/security/ms16-155

• CVE-2016-7270

Related products

• Microsoft-.NET-Framework

CVE list

• CVE-2016-7270
  warning

KB list

• 3206632
• 3204801
• 3204802
• 3204805

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com