PT-2016-1689 · Microsoft · .Net Framework
Rgod
·
Publicado
2016-04-12
·
Atualizado
2018-10-12
·
CVE-2016-0148
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Microsoft .NET Framework versions 4.6 through 4.6.1
Description
The issue is related to the improper handling of library loading, which can be exploited by a local user to gain privileges via a crafted application. This can lead to a remote code execution scenario where an attacker could take control of an affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. The impact may be less severe for users with limited user rights compared to those operating with administrative rights.
Recommendations
For Microsoft .NET Framework versions 4.6 through 4.6.1, consider applying security updates or patches to resolve the issue, as no specific workaround is provided for these versions.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
.Net Framework