Microsoft .NET Framework Information Disclosure Vulnerability
Last Update Date:
14 Jul 2016
Release Date:
13 Jul 2016
2889
Views
RISK: Medium Risk
TYPE: Operating Systems - Windows OS
An information disclosure vulnerability exists when .NET Framework improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity declaration.
Impact
- Information Disclosure
System / Technologies affected
- .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
https://technet.microsoft.com/en-us/library/security/MS16-091
Vulnerability Identifier
Source
Related Link
Share with