CVE-2016-0033 in Windows

Resumen

por MITRE

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 does not prevent recursive compilation of XSLT transforms, which allows remote attackers to cause a denial of service (performance degradation) via crafted XSLT data, aka ".NET Framework Stack Overflow Denial of Service Vulnerability."

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 2015-12-04
• Divulgación: 2016-02-10
• Moderación: aceptado
• Artículo: VDB-80876
• CPE: listo
• CWE: CWE-94 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.19296
• KEV: no
• Actividades: muy bajo
• Sector: Homeoffice, Police, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0033
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0033
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0033/