Description
Microsoft .NET Framework contains an information disclosure vulnerability that exposes the ObjRef URI to an attacker, ultimately enabling remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Microsoft .NET Framework 2.0 Service Pack 2 | Microsoft / Microsoft .NET Framework 2.0 Service Pack 2 | >= 2.0.0, < 3.0.50727.8976 | affected |
| Microsoft .NET Framework 3.0 Service Pack 2 | Microsoft / Microsoft .NET Framework 3.0 Service Pack 2 | >= 3.0.0, < 3.0.50727.8976 | affected |
| Microsoft .NET Framework 3.5 | Microsoft / Microsoft .NET Framework 3.5 | >= 3.5.0, < 3.0.50727.8976 | affected |
| Microsoft .NET Framework 3.5.1 | Microsoft / Microsoft .NET Framework 3.5.1 | >= 3.5.0, < 3.0.30729.8959 | affected |
| Microsoft .NET Framework 3.5 AND 4.6/4.6.2 | Microsoft / Microsoft .NET Framework 3.5 AND 4.6/4.6.2 | >= 10.0.0, < 10.0.10240.20402 | affected |
| Microsoft .NET Framework 3.5 AND 4.7.2 | Microsoft / Microsoft .NET Framework 3.5 AND 4.7.2 | >= 4.7.0, < 4.7.04081.03 | affected |
| Microsoft .NET Framework 3.5 AND 4.8 | Microsoft / Microsoft .NET Framework 3.5 AND 4.8 | >= 4.8.0, < 4.8.04690.02 | affected |
| Microsoft .NET Framework 3.5 AND 4.8.1 | Microsoft / Microsoft .NET Framework 3.5 AND 4.8.1 | >= 4.8.1, < 4.8.09214.01 | affected |
| Microsoft .NET Framework 4.6.2 | Microsoft / Microsoft .NET Framework 4.6.2 | >= 4.7.0, < 4.7.04081.03 | affected |
| Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | Microsoft / Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 | >= 4.7.0, < 4.7.04081.03 | affected |
| Microsoft .NET Framework 4.8 | Microsoft / Microsoft .NET Framework 4.8 | >= 4.8.0, < 4.8.04690.02 | affected |