KLA11101
Arbitrary code execution vulnerability in Microsoft .NET Framework

Обновлено: 21/09/2023
Дата обнаружения
12/09/2017
Уровень угрозы
Critical
Описание

An improper validation of untrusted input was found in Microsoft .NET Framework. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed document or application.


Technical details

NB: This vulnerability does not have any public CVSS rating, so rating can be changed by the time.

Пораженные продукты

Microsoft .NET Framework 4.7
Microsoft .NET Framework 2.0
Microsoft .NET Framework 3.5
Microsoft .NET Framework 3.5.1
Microsoft .NET Framework 4.5.2
Microsoft .NET Framework 4.6
Microsoft .NET Framework 4.6.1
Microsoft .NET Framework 4.6.2

Решение

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Первичный источник обнаружения
CVE-2017-8759
CVE-2017-8759
Оказываемое влияние
?
ACE 
[?]
Связанные продукты
Microsoft .NET Framework
CVE-IDS
CVE-2017-87599.3Critical