Description (CNA)
Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, and 3.5.1 does not properly implement the ASLR protection mechanism, which allows remote attackers to obtain sensitive address information via a crafted web site, aka ".NET ASLR Vulnerability."
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securitytracker.com/id/1030721
- http://www.securityfocus.com/bid/69145
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-046
ADP enrichment
No English description supplied.