MS14-046: Vulnerability in .NET Framework Could Allow Security Feature Bypass (2984625)

medium Nessus Plugin ID 77164

Synopsis

The version of the .NET Framework installed on the remote host is affected by a security feature bypass vulnerability.

Description

The remote Windows host has a version of the Microsoft .NET Framework that is affected by a vulnerability that could allow an attacker to bypass the Address Space Layout Randomization (ASLR) security feature.

Solution

Microsoft has released a set of patches for .NET Framework 2.0 SP2, 3.0 SP2, 3.5, and 3.5.1.

See Also

https://www.nessus.org/u?5756f036

Plugin Details

Severity: Medium

ID: 77164

File Name: smb_nt_ms14-046.nasl

Version: 1.12

Type: local

Agent: windows

Published: 8/12/2014

Updated: 5/15/2020

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 2.5

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Information

CPE: cpe:/a:microsoft:.net_framework

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 8/12/2014

Vulnerability Publication Date: 8/12/2014

Reference Information

CVE: CVE-2014-4062

BID: 69145

IAVA: 2014-A-0128-S

MSFT: MS14-046

MSKB: 2937608, 2937610, 2943344, 2943357, 2966825, 2966826, 2966827, 2966828