PT-2015-2672 · Microsoft · .Net Framework

Published 2015-11-10 · Updated 2018-10-12 · CVE-2015-6115

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 2.0 SP2, 3.5, and 3.5.1

Description A security feature bypass exists in a .NET Framework component that does not properly implement the Address Space Layout Randomization (ASLR) security feature. This bypass could allow an attacker to load additional malicious code in an attempt to exploit another vulnerability. The ASLR bypass by itself does not allow arbitrary code execution, but it could be used in conjunction with another vulnerability to run arbitrary code. The issue can be exploited via a crafted web site.

Recommendations For Microsoft .NET Framework versions 2.0 SP2, 3.5, and 3.5.1, consider applying security updates or patches that properly implement the ASLR security feature to prevent bypassing of this protection mechanism. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2015-12037

CVE-2015-6115

Affected Products

.Net Framework

References · 8

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-118 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6115 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-6115 · Security Note
• https://bdu.fstec.ru/vul/2015-12037 · Security Note
• http://technet.microsoft.com/security/bulletin/MS15-118 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6115 · Note
• http://technet.microsoft.com/security/bulletin/ms15-118 · Note
• http://securitytracker.com/id/1034116 · Note