Microsoft .NET Framework Information Disclosure Vulnerability
CVE-2024-29059

7.5HIGH

Key Information:

Vendor: Microsoft
Status: Microsoft .net Framework 4.8; Microsoft .net Framework 3.5 And 4.8; Microsoft .net Framework 3.5 And 4.7.2; Microsoft .net Framework 4.6.2/4.7/4.7.1/4.7.2
Vendor: CVE Published:; 23 March 2024

Badges

👾 Exploit Exists📰 News Worthy

Summary

A vulnerability in Microsoft .NET Framework, identified as CVE-2024-29059, allows malicious users to obtain sensitive information. This vulnerability affects multiple versions of the .NET Framework, and a high severity rating has been assigned to it. Although there are no known exploits in the wild, affected users are advised to install necessary updates from the KB section listed in Windows Update as a solution to mitigate the risk.

Affected Version(s)

Microsoft .NET Framework 2.0 Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 2.0.0 < 3.0.50727.8976

Microsoft .NET Framework 3.0 Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 3.0.0 < 3.0.50727.8976

Microsoft .NET Framework 3.5 AND 4.6/4.6.2 Windows 10 for 32-bit Systems 10.0.0 < 10.0.10240.20402

News Articles

Pentest-Tools.com

CVE-2024-29059

.NET Framework - Leaking ObjRefs via HTTP .NET Remoting (CVE-2024-29059)

.NET Framework Information Disclosure Vulnerability.

9 months ago

www.shockwave.cloud

CVE-2024-29059

Shockwave | Attack Surface & Continuous Threat Exposure Management, Simplified - Shockwave Attack Surface Management - CVE-2024-29059 .NET Remote Code Execution

Shockwave is a leading platform in Attack Surface and Continuous Threat Exposure Management, offering solutions for EASM, CTEM, SaaS, third-party risk, cloud misconfigurations, and dynamic web scanning. Our industry-leading technology enables organizations to detect vulnerabilities, manage risks, an...

9 months ago