CVEvulnerability
CVE-2014-4062
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, and 3.5.1 does not properly implement the ASLR protection mechanism, which allows remote attackers to obtain sensitive address information via a crafted web site, aka ".NET ASLR Vulnerability."
Affected configurations
• microsoft .net framework 1.1
• microsoft .net framework 2.0
• microsoft .net framework 3.0
• microsoft .net framework 3.5
• microsoft .net framework 3.5.1
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/69145 www.securityfocus.com
- http://www.securitytracker.com/id/1030721 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-046 docs.microsoft.com
- http://www.securityfocus.com/bid/69145 www.securityfocus.com
- http://www.securitytracker.com/id/1030721 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-046 docs.microsoft.com