CVE-2014-4062

Published: Aug 12, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, and 3.5.1 does not properly implement the ASLR protection mechanism, which allows remote attackers to obtain sensitive address information via a crafted web site, aka ".NET ASLR Vulnerability."

Affected (5)

Products: Microsoft: .net Framework

Microsoft

1 product

.net Framework

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 1.1 sp1
Microsoft .net Framework	Version 2.0 sp2
Microsoft .net Framework	Version 3.0 sp2
Microsoft .net Framework	Version 3.5.1
Microsoft .net Framework	Version 3.5

Related CWEs

CWE-264

References (6)

http://www.securityfocus.com/bid/69145

Source: secure@microsoft.com

http://www.securitytracker.com/id/1030721

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-046

Source: secure@microsoft.com

http://www.securityfocus.com/bid/69145

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1030721

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-046

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.