CVE-2019-0864

5.5MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft .net Framework 4.5.2; Microsoft .net Framework 4.6; Microsoft .net Framework 4.6.2 On Windows 10 For 32-bit Systems; Microsoft .net Framework 4.6.2 On Windows 10 For X64-based Systems
Vendor: CVE Published:; 16 May 2019

Summary

A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory, aka '.NET Framework Denial of Service Vulnerability'.

Affected Version(s)

Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2

Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2

Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2

References

https://portal.msrc.microsoft.com/en-US/security-guidance...

x_refsource_MISC

EPSS Score

0% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
May 16, 2019
Vulnerability Reserved
Nov 26, 2018

Collectors

NVD DatabaseMitre Database