high7.8Known exploitedPublic exploit code
CVE-2017-8759
Microsoft .NET Framework Remote Code Execution Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2022-05-03.
Apply updates per vendor instructions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows .NET Framework - Remote Code Execution2017-09-13 · remote · windows
Impact
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | .Net Framework | Versions 4.5.2, 3.5.1, 3.5, 2.0, 4.6.1, 4.6 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://www.securityfocus.com/bid/100742
- http://www.securitytracker.com/id/1039324
- https://github.com/GitHubAssessments/CVE_Assessments_01_2020
- https://github.com/bhdresh/CVE-2017-8759
- https://github.com/nccgroup/CVE-2017-8759
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759
- https://www.exploit-db.com/exploits/42711/
- http://www.securityfocus.com/bid/100742
- http://www.securitytracker.com/id/1039324
- https://github.com/GitHubAssessments/CVE_Assessments_01_2020
- https://github.com/bhdresh/CVE-2017-8759
- https://github.com/nccgroup/CVE-2017-8759
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759
- https://www.exploit-db.com/exploits/42711/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8759