Lucene search

K
mscveMicrosoftMS:CVE-2018-8416
HistoryNov 13, 2018 - 8:00 a.m.

.NET Core Tampering Vulnerability

2018-11-1308:00:00
Microsoft
msrc.microsoft.com
9

0.003 Low

EPSS

Percentile

65.9%

A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the destination of the files and directories.

To exploit the vulnerability, an attacker must send a specially crafted file to a vulnerable system.

The security update fixes the vulnerability by ensuring .NET Core properly handles files.