4.7Medium

CVE-2020-16937.NET Framework Information Disclosure Vulnerability

Microsoft Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2; Microsoft Microsoft .NET Framework 4.8; Microsoft Microsoft .NET Framework 3.5 AND 4.8; Mic… Published: (6 years ago)

Description

<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an affected system's memory.</p> <p>To exploit the vulnerability, an authenticated attacker would need to run a specially crafted application.</p> <p>The update addresses the vulnerability by correcting how the .NET Framework handles objects in memory.</p>

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Microsoft Microsoft .NET Framework 2.0 Service Pack 2 2.0.0 – < publication
Microsoft Microsoft .NET Framework 3.5 3.5.0 – < publication
Microsoft Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 3.5.0 – < publication
Microsoft Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 3.0.0.0 – < publication
Microsoft Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 3.0 – < publication
Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 4.7.0 – < publication
Microsoft Microsoft .NET Framework 3.5 AND 4.8 4.8.0 – < publication
Microsoft Microsoft .NET Framework 3.5.1 3.5.0 – < publication
Microsoft Microsoft .NET Framework 4.5.2 4.0.0.0 – < publication
Microsoft Microsoft .NET Framework 4.6 4.0.0.0 – < publication
Microsoft Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 4.0.0.0 – < publication
Microsoft Microsoft .NET Framework 4.8 4.8.0 – < publication
microsoft .net 4.8
microsoft .net framework 4.6

References and patches