Microsoft .NET Framework CVE-2015-1648 Information Disclosure Vulnerability
BID:74010
Info
Microsoft .NET Framework CVE-2015-1648 Information Disclosure Vulnerability
| Bugtraq ID: | 74010 |
| Class: | Design Error |
| CVE: |
CVE-2015-1648 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2015 12:00AM |
| Updated: | May 15 2015 12:07AM |
| Credit: | Microsoft |
| Vulnerable: |
Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework 3.5 Microsoft .NET Framework 2.0 SP2 Microsoft .NET Framework 1.1 SP1 Avaya Messaging Application Server 5.2 Avaya Meeting Exchange - Webportal 0 Avaya CallPilot 5.0 Avaya CallPilot 4.0 |
| Not Vulnerable: | |
Discussion
Microsoft .NET Framework CVE-2015-1648 Information Disclosure Vulnerability
The Microsoft .NET Framework is prone to a remote information-disclosure vulnerability.
Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks.
The Microsoft .NET Framework is prone to a remote information-disclosure vulnerability.
Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks.
Exploit / POC
Microsoft .NET Framework CVE-2015-1648 Information Disclosure Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Microsoft .NET Framework CVE-2015-1648 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Microsoft .NET Framework CVE-2015-1648 Information Disclosure Vulnerability
References:
References:
- Microsoft Homepage (Microsoft)