CVE-2017-0248: Microsoft Corporation Microsoft .NET Framework

Описание

Оригинално описание

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."

Засегнати продукти

• Microsoft Corporation Microsoft .NET Framework: Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7

История

Други уязвимости в Microsoft Corporation Microsoft .NET Framework

• 7.8CVE-2017-8759

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2017-0248
• https://nvd.nist.gov/vuln/detail/CVE-2017-0248
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0248
• http://www.securityfocus.com/bid/98117
• http://www.securitytracker.com/id/1038458