Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
| Link | Tags |
|---|---|
| http://www.securityfocus.com/bid/100742 | vdb entry third party advisory broken link |
| https://github.com/bhdresh/CVE-2017-8759 | third party advisory exploit |
| https://github.com/nccgroup/CVE-2017-8759 | third party advisory exploit |
| https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759 | patch vendor advisory |
| https://www.exploit-db.com/exploits/42711/ | exploit vdb entry third party advisory |
| http://www.securitytracker.com/id/1039324 | vdb entry third party advisory broken link |
| https://github.com/GitHubAssessments/CVE_Assessments_01_2020 | third party advisory |