Security Updates for Microsoft .NET Framework (September 2018)

critical Nessus Plugin ID 117431

Language:

Synopsis

The Microsoft .NET Framework installation on the remote host is missing a security update.

Description

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability :

- A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. (CVE-2018-8421)

Solution

Microsoft has released security updates for Microsoft .NET Framework.

Plugin Details

Severity: Critical

ID: 117431

File Name: smb_nt_ms18_sep_dotnet.nasl

Version: 1.7

Type: local

Agent: windows

Family: Windows : Microsoft Bulletins

Published: 9/12/2018

Updated: 11/1/2019

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2018-8421

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:microsoft:.net_framework

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 9/11/2018

Vulnerability Publication Date: 9/11/2018

Reference Information

CVE: CVE-2018-8421

BID: 105222

MSFT: MS18-4457025, MS18-4457026, MS18-4457027, MS18-4457028, MS18-4457029, MS18-4457030, MS18-4457033, MS18-4457034, MS18-4457035, MS18-4457036, MS18-4457037, MS18-4457038, MS18-4457042, MS18-4457043, MS18-4457044, MS18-4457045, MS18-4457053, MS18-4457054, MS18-4457055, MS18-4457056, MS18-4457128, MS18-4457131, MS18-4457132, MS18-4457138, MS18-4457142

MSKB: 4457025, 4457026, 4457027, 4457028, 4457029, 4457030, 4457033, 4457034, 4457035, 4457036, 4457037, 4457038, 4457042, 4457043, 4457044, 4457045, 4457053, 4457054, 4457055, 4457056, 4457128, 4457131, 4457132, 4457138, 4457142

Detections

Analytics