CVE-2017-0160 Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Remote Code Execution Vulnerability."
HighCVSS 7.8
EPSS 17.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Remote Code Execution Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft net framework | = 2.0-sp2 | No fix listed |
| Microsoft net framework | = 3.5 | No fix listed |
| Microsoft net framework | = 3.5.1 | No fix listed |
| Microsoft net framework | = 4.5.2 | No fix listed |
| Microsoft net framework | = 4.6 | No fix listed |
| Microsoft net framework | = 4.6.1 | No fix listed |
| Microsoft net framework | = 4.6.2 | No fix listed |
| Microsoft net framework | = 4.7 | No fix listed |
| Microsoft net framework | = .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 | No fix listed |
References
- 97447 third-party-advisory vdb-entry
- 1038236 vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory
- 41903 exploit