CVE Number | Vulnerability | Product | Severity | Date |
---|---|---|---|---|
CVE-2018-8540 | .NET Framework Remote Code Injection Vulnerability | Microsoft .NET Framework | Critical | 12-12-2018 |
Technical Information
Brief overview of the risk:
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly. An attacker who successfully exploited this vulnerability could take control of an affected system.
Detailed Information on the risk:
To exploit the vulnerability, an attacker would need to pass specific input to an application utilizing susceptible .Net methods.
Further information on this exploit is available at : CVE-2018-8540
Affected Software
Microsoft .NET Framework 4.5.2
Microsoft .NET Framework 4.6
Microsoft .NET Framework 4.7.2
Microsoft .NET Framework 3.5
Microsoft .NET Framework 3.5.1