CVE-2015-2481
HighSummary
The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during optimization, allowing remote attackers to execute arbitrary code via a crafted .NET application.
Risk Assessment
This vulnerability may lead to privilege escalation and allow attackers to gain control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update to the latest version of .NET Framework to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Microsoft .NET Framework 4.6
See all- CVE-2016-0047High
WinForms in Microsoft .NET Framework (versions 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1) allows remote attackers to obtain sensitive information from process memory via crafted icon data.
- CVE-2015-2480High
The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during optimization attempts, allowing remote attackers to execute arbitrary code via a crafted .NET application.
- CVE-2015-2479High
The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an optimization attempt, allowing remote attackers to execute arbitrary code via a crafted .NET application.
Original NVD description (English source)
The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers to execute arbitrary code via a crafted .NET application, aka "RyuJIT Optimization Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2479 and CVE-2015-2480.