Multiple vulnerabilities in Microsoft .NET Framework

Описание

Multiple serious vulnerabilities have been found in Microsoft .NET Framework. Malicious users can exploit these vulnerabilities to bypass security restrictions,.

Below is a complete list of vulnerabilities

1. Erroneous XML parsing at Document Type Definition can be exploited remotely via a specially designed XML file to obtain sensitive information;
2. Improper HTTP requests validation at ASP.NET can be exploited remotely via a specially designed web content to inject arbitrary script;
3. Improper Address Space Layout Randomization implementation can be exploited remotely via a specially designed web site to bypass security restrictions.

---

Technical details

By exploiting (1) attacker can gain read access to local files.

Первичный источник обнаружения

• CVE-2015-6099
  CVE-2015-6096
  CVE-2015-6115
  

Связанные продукты

• Microsoft-.NET-Framework

Список CVE

• CVE-2015-6099
  warning
• CVE-2015-6096
  warning
• CVE-2015-6115
  warning

Список KB

• 3097999
• 3098784
• 3104507
• 3098780
• 3098779
• 3098785
• 3097995
• 3097997
• 3098000

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com