CVE-2020-1046 — Microsoft NET Framework 2.0 Service Pack 2 vulnerability
5 documents5 sources
Severity
7.8HIGHNVD
EPSS
11.3%
top 6.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 17
Latest updateMay 24
Description
A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system.
To exploit the vulnerability, an attacker would need to be able to upload a specially crafted file to a web application.
The security update addresses the vulnerability by correcting how .NET Framework processes input.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages6 packages
Patches
🔴Vulnerability Details
2📋Vendor Advisories
1💬Community
1Bugzilla▶
CVE-2020-6104 f2fs-tools: specially crafted f2fs filesystem can cause information disclosure↗2020-10-15