4397 matches found
PT-2021-27462
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: dotnet parse tilde 2, dotnet parse tilde, and dotnet...
PT-2021-27582
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state involves several functions: yr object set string, dotnet parse us, and dotnet...
PT-2021-27504
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions dotnet parse us, dotnet parse com, and dotnet load. No informatio...
January 12, 2021-KB4598499 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019
None None...
January 12, 2021-KB4597247 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
None None...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed several vulnerabilities in several developer tools. A malicious party could potentially exploit them to execute arbitrary code with user privileges. Visual Studio: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4598501)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4598501 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...
Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB4598500)
Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB4598500 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...
PT-2021-28084
Name of the Vulnerable Software and Affected Versions dotnet affected versions not specified Description The issue is related to a heap-buffer-overflow read, which occurs in the dotnet parse tilde 2, dotnet parse tilde, and dotnet parse com functions. This is based on an OSS-Fuzz report...
PT-2020-22192
Name of the Vulnerable Software and Affected Versions dotnet affected versions not specified Description The issue is related to a heap-buffer-overflow read, which can cause a crash. Technical details about the crash include the dotnet parse tilde 2, dotnet parse tilde, and dotnet parse com...
yara:dotnet_fuzzer: Heap-buffer-overflow in dotnet_parse_tilde_2
Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5880393521430528 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: dotnetfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x61300000035...
PT-2020-22171
Name of the Vulnerable Software and Affected Versions dotnet affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the dotnet parse tilde 2, dotnet parse tilde, and dotnet parse com functions. Recommendations At...
yara:dotnet_fuzzer: Heap-buffer-overflow in dotnet_parse_tilde_2
Project: https://github.com/VirusTotal/yara.git Detailed Report: https://oss-fuzz.com/testcase?key=5636481138556928 Project: yara Fuzzing Engine: libFuzzer Fuzz Target: dotnetfuzzer Job Type: libfuzzerasanyara Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61c000000f6c...
WS-2020-0308
YARA before v4.0.3 is vulnerable to buffer overflow in "dotnet" module. The strncpy function was being invoked with a source buffer that was shorter than MAXTYPELIBSIZE and the string was not null-terminated, which means that strncpy read past the end of the buffer. Now the limit pass to strncpy ...
November 10, 2020-KB4585210 Cumulative Update for .NET Framework 4.8 for Windows 10 Version 1803
None None...
November 10, 2020-KB4580419 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, and Windows Server, version 20H2
None None...
November 10, 2020-KB4580980 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10 , version 1903, Windows Server, version 1903, Windows 10 , version 1909, and Windows Server, version 1909
None None...
Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB4586083)
Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB4586083 Applies to: Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1...
Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 (KB4586086)
Security and Quality Rollup for .NET Framework 2.0, 3.0, 4.5.2, 4.6 for Windows Server 2008 SP2 KB4586086 Applies to: Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 IMPORTANT Verify thatyou have installed the required updates...