CVE-2016-0033

CVE-2016-0033 affects the Microsoft .NET Framework (2.0 SP2; 3.5/3.5.1; 4.5.2; 4.6; 4.6.1). The root cause is failure to prevent recursive compilation of XSLT transforms, allowing a remote attacker to cause a denial of service by sending crafted XSLT data, resulting in performance degradation. Co...

MS16-019: Security Update for .NET Framework to Address Denial of Service (3137893)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities in the .NET Framework : - A denial of service vulnerability exists due to improper handling of certain Extensible Stylesheet Language Transformations XSLT. A remote attacker can exploit...