PT-2014-1664 · Microsoft · .Net Framework+2

James Forshaw · Published 2014-10-14 · Updated 2018-10-12 · CVE-2014-4073

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2

Description The issue allows remote attackers to gain privileges via vectors involving Internet Explorer. It exists in Microsoft .NET Framework and allows an attacker to elevate privileges on the targeted system. The vulnerability is related to the processing of unverified data during interaction with the ClickOnce installer.

Recommendations For Microsoft .NET Framework versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, consider restricting interaction with the ClickOnce installer until a patch is available. As a temporary workaround, consider disabling the ClickOnce installer functionality to minimize the risk of exploitation. Avoid using Internet Explorer to interact with potentially vulnerable systems until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2015-00598

CVE-2014-4073

Affected Products

.Net Framework

Clickonce

Internet Explorer

References · 10

• http://blogs.technet.com/b/srd/archive/2014/10/14/more-details-about-cve-2014-4073-elevation-of-privilege-vulnerability.aspx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-4073 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4073 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00598 · Security Note
• http://securityfocus.com/bid/70313 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4073 · Note
• http://secunia.com/advisories/60969 · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms14-057 · Note
• http://securitytracker.com/id/1031021 · Note