PT-2015-5416 · Microsoft · Windows Forms+1

Publicado 2015-05-12 · Atualizado 2018-10-12 · CVE-2015-1673

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 1.1 SP1 through 4.5.2

Description The issue is caused by the improper handling of objects in memory by the Windows Forms (WinForms) libraries in Microsoft .NET Framework. This allows an attacker to potentially take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system could be less impacted than those operating with administrative user rights.

Recommendations For Microsoft .NET Framework versions 1.1 SP1 through 4.5.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-1673

Produtos afetados

.Net Framework

Windows Forms

Referências · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1673 · Nota de Segurança
• http://technet.microsoft.com/security/bulletin/ms15-048 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1673 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1673 · Nota
• http://securityfocus.com/bid/74487 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-048 · Aviso do Fabricante
• http://securitytracker.com/id/1032297 · Nota