logo
DATABASE RESOURCES PRICING ABOUT US

KLA11101 Arbitrary code execution vulnerability in Microsoft .NET Framework

Description

### *Detect date*: 09/12/2017 ### *Severity*: Critical ### *Description*: An improper validation of untrusted input was found in Microsoft .NET Framework. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed document or application. ### *Affected products*: Microsoft .NET Framework 4.7 Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2 ### *Solution*: Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel) ### *Original advisories*: [CVE-2017-8759](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759>) [CVE-2017-8759](<https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8759>) ### *Impacts*: ACE ### *Related products*: [Microsoft .NET Framework](<https://threats.kaspersky.com/en/product/Microsoft-.NET-Framework/>) ### *CVE-IDS*: [CVE-2017-8759](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8759>)9.3Critical ### *Microsoft official advisories*: ### *KB list*: [4038788](<http://support.microsoft.com/kb/4038788>) [4038782](<http://support.microsoft.com/kb/4038782>) [4038783](<http://support.microsoft.com/kb/4038783>) [4038781](<http://support.microsoft.com/kb/4038781>) [4040955](<http://support.microsoft.com/kb/4040955>) [4040956](<http://support.microsoft.com/kb/4040956>) [4040957](<http://support.microsoft.com/kb/4040957>) [4040958](<http://support.microsoft.com/kb/4040958>) [4040959](<http://support.microsoft.com/kb/4040959>) [4040960](<http://support.microsoft.com/kb/4040960>) [4040964](<http://support.microsoft.com/kb/4040964>) [4040965](<http://support.microsoft.com/kb/4040965>) [4040966](<http://support.microsoft.com/kb/4040966>) [4040967](<http://support.microsoft.com/kb/4040967>) [4040971](<http://support.microsoft.com/kb/4040971>) [4040972](<http://support.microsoft.com/kb/4040972>) [4040973](<http://support.microsoft.com/kb/4040973>) [4040974](<http://support.microsoft.com/kb/4040974>) [4040975](<http://support.microsoft.com/kb/4040975>) [4040977](<http://support.microsoft.com/kb/4040977>) [4040978](<http://support.microsoft.com/kb/4040978>) [4040979](<http://support.microsoft.com/kb/4040979>) [4040980](<http://support.microsoft.com/kb/4040980>) [4040981](<http://support.microsoft.com/kb/4040981>) ### *Exploitation*: This vulnerability can be exploited by the following malware:


Related