CVE-2016-0047
HighSummary
WinForms in Microsoft .NET Framework (versions 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1) allows remote attackers to obtain sensitive information from process memory via crafted icon data.
Risk Assessment
This vulnerability may lead to the disclosure of sensitive information, posing a risk to the organization's data security.
Recommendation
It is recommended to update to the latest version of .NET Framework to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Microsoft .NET Framework
See all- CVE-2015-2481High
The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during optimization, allowing remote attackers to execute arbitrary code via a crafted .NET application.
- CVE-2015-2480High
The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during optimization attempts, allowing remote attackers to execute arbitrary code via a crafted .NET application.
- CVE-2015-2479High
The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an optimization attempt, allowing remote attackers to execute arbitrary code via a crafted .NET application.
Original NVD description (English source)
WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."