CVE-2017-0160

EPSS 14.42%
Published 12.04.2017 14:59:00
Last modified 20.04.2025 01:37:25
Source secure@microsoft.com
Teams watchlist Login
Open Login

Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Remote Code Execution Vulnerability."

Affected products Warnungen 0 Metrics 3 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ .Net Framework Version2.0 Updatesp2

Microsoft ≫ .Net Framework Version3.5

Microsoft ≫ .Net Framework Version3.5.1

Microsoft ≫ .Net Framework Version4.5.2

Microsoft ≫ .Net Framework Version4.6

Microsoft ≫ .Net Framework Version4.6.1

Microsoft ≫ .Net Framework Version4.6.2

Microsoft ≫ .Net Framework Version4.7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	14.42%	0.942

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://www.securityfocus.com/bid/97447

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1038236

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0160

Patch

Vendor Advisory

https://www.exploit-db.com/exploits/41903/

https://nvd.nist.gov/vuln/detail/CVE-2017-0160

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-0160

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-0160

EUVD