VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Oct 16, 2020· Updated Aug 4, 2024

.NET Framework Information Disclosure Vulnerability

CVE-2020-16937

Description

<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an affected system's memory.</p> <p>To exploit the vulnerability, an authenticated attacker would need to run a specially crafted application.</p> <p>The update addresses the vulnerability by correcting how the .NET Framework handles objects in memory.</p>

Affected products

9
  • Microsoft/Netv55 versions
    cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*range: 4.8.0
    • cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*range: 4.7.0
    • cpe:2.3:a:microsoft:.net:2.0:sp2:*:*:*:*:*:*range: 2.0.0
    • cpe:2.3:a:microsoft:.net:3.5:*:*:*:*:*:*:*range: 3.5.0
    • cpe:2.3:a:microsoft:.net:3.5.1:*:*:*:*:*:*:*range: 3.5.0
  • Microsoft/.net Frameworkv54 versions
    cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*range: 3.0.0.0
    • cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*range: 3.5.0
    • cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*range: 4.0.0.0
    • cpe:2.3:a:microsoft:.net_framework:4.5.2:*:*:*:*:*:*:*range: 4.0.0.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.