PT-2014-5702 · Microsoft · .Net Framework

Publicado

1999-01-01

·

Atualizado

2018-10-12

·

CVE-2014-4149

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 1.1 SP1 through 4.5.2
Description The issue arises from improper TypeFilterLevel checks, allowing remote attackers to execute arbitrary code via crafted data to a .NET Remoting endpoint. This is an elevation of privilege vulnerability that exists in the way that .NET Framework handles TypeFilterLevel checks for some malformed objects. An attacker who successfully exploits this could take complete control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.
Recommendations For Microsoft .NET Framework versions 1.1 SP1 through 4.5.2, consider disabling .NET Remoting endpoints until a patch is available to prevent exploitation. Restrict access to sensitive data and systems to minimize the risk of privilege elevation.

Exploit

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-4149
DOTNETREMOTINGCHECK

Produtos afetados

.Net Framework