CVE-2015-2479
HighSummary
The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an optimization attempt, allowing remote attackers to execute arbitrary code via a crafted .NET application.
Risk Assessment
This vulnerability may lead to privilege escalation and allow attackers to remotely take control of the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update to the latest version of .NET Framework to mitigate this vulnerability and to monitor .NET applications for potential attacks.
Other vulnerabilities in Microsoft .NET Framework 4.6
See all- CVE-2016-0047High
WinForms in Microsoft .NET Framework (versions 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1) allows remote attackers to obtain sensitive information from process memory via crafted icon data.
- CVE-2015-2481High
The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during optimization, allowing remote attackers to execute arbitrary code via a crafted .NET application.
- CVE-2015-2480High
The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during optimization attempts, allowing remote attackers to execute arbitrary code via a crafted .NET application.
Original NVD description (English source)
The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers to execute arbitrary code via a crafted .NET application, aka "RyuJIT Optimization Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2480 and CVE-2015-2481.