CVE-2016-3255

CVE-2016-3255 affects Microsoft .NET Framework versions including 2.0 SP2, 3.x, and 4.x. The issue is an information disclosure via XML data containing external entity declarations (XXE), enabling a remote attacker to read arbitrarily files. Connected MSKB entries indicate a July 12, 2016 securit...

Microsoft .NET Framework CVE-2016-3255 XML External Entity Information Disclosure Vulnerability

Description The Microsoft .NET Framework is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information. Successful exploits may lead to other attacks. Technologies Affected Microsoft .NET Framework 2.0 SP2 Microsoft .NET Framework...