CVE-2014-4062: Medium severity Microsoft .NET Framework vulnerability

Published Aug 12, 2014

Updated

Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, and 3.5.1 does not properly implement the ASLR protection mechanism, which allows remote attackers to obtain sensitive address information via a crafted web site, aka ".NET ASLR Vulnerability."

Affected Software

5 affected components

Microsoft .NET Framework=1.1-sp1

Microsoft .NET Framework=2.0-sp2

Microsoft .NET Framework=3.0-sp2

Microsoft .NET Framework=3.5

Microsoft .NET Framework=3.5.1

Event History

Aug 12, 2014

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4062?

CVE-2014-4062 has a Critical severity rating due to its potential for enabling remote code execution.

What software is affected by CVE-2014-4062?

CVE-2014-4062 affects Microsoft .NET Framework versions 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, and 3.5.1.

How do I fix CVE-2014-4062?

To fix CVE-2014-4062, ensure you apply the latest security updates provided by Microsoft for the affected .NET Framework versions.

What are the potential impacts of CVE-2014-4062?

The potential impacts of CVE-2014-4062 include unauthorized access to sensitive information and possible remote code execution.

When was CVE-2014-4062 discovered?

CVE-2014-4062 was publicly disclosed in July 2014.