CVE-2018-8284
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vuln…
Impact
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | .Net Framework | Versions 2.0, 3.0, 3.5, 3.5.1, 4.5.2, 4.6 |
| Microsoft | Project Server | Versions 2010, 2013 |
| Microsoft | Sharepoint Enterprise Server | Versions 2013, 2016 |
| Microsoft | Sharepoint Foundation | Versions 2010, 2013 |
| Microsoft | Sharepoint Server | Versions 2010, 2013 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104667
- http://www.securitytracker.com/id/1041257
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8284
- http://www.securityfocus.com/bid/104667
- http://www.securitytracker.com/id/1041257
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8284