CVE-2016-0047 in Windows

Resumen

por MITRE

WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."

Once again VulDB remains the best source for vulnerability data.

• Reservar: 2015-12-04
• Divulgación: 2016-02-10
• Moderación: aceptado
• Artículo: VDB-80877
• CPE: listo
• CWE: CWE-200 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.17158
• KEV: no
• Actividades: muy bajo
• Sector: Homeoffice, Chemical, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0047
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0047
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0047/