Multiple vulnerabilities in Microsoft Developer Tools

Описание

Multiple vulnerabilities were found in Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in ASP.NET Core can be exploited remotely via specially crafted file to execute arbitrary code.
2. A denial of service vulnerability in ASP.NET Core can be exploited remotely via specially crafted requests to cause denial of service.
3. A remote code execution vulnerability in .NET Framework can be exploited remotely via specially crafted file to execute arbitrary code.
4. A remote code execution vulnerability in .NET Framework can be exploited remotely.

Первичный источник обнаружения

• CVE-2020-0603
  CVE-2020-0602
  CVE-2020-0605
  CVE-2020-0646
  CVE-2020-0606
  

Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Связанные продукты

• Microsoft-.NET-Framework

Список CVE

• CVE-2020-0603
  critical
• CVE-2020-0602
  warning
• CVE-2020-0605
  critical
• CVE-2020-0646
  critical
• CVE-2020-0606
  critical

Список KB

• 4535101
• 4534306
• 4534978
• 4534976
• 4532933
• 4534276
• 4532938
• 4532936
• 4534271
• 4534979
• 4532935
• 4535103
• 4535104
• 4535105
• 4534293
• 4534977
• 4535102
• 4556826
• 4556813
• 4556812
• 4556807
• 4556406
• 4556405
• 4556404
• 4556403
• 4556402
• 4556401
• 4556400
• 4556441
• 4552929
• 4552926
• 4552931
• 4556399
• 4552928

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com