CVE-2015-1672: Medium severity microsoft .net framework 4 vulnerability

Published May 13, 2015

Updated

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to cause a denial of service (recursion and performance degradation) via crafted encrypted data in an XML document, aka ".NET XML Decryption Denial of Service Vulnerability."

Affected Software

7 affected components

Microsoft .NET Framework=2.0-sp2

Microsoft .NET Framework=3.5

Microsoft .NET Framework=3.5.1

Microsoft .NET Framework=4.0

Microsoft .NET Framework=4.5

Microsoft .NET Framework=4.5.1

Microsoft .NET Framework=4.5.2

Event History

May 13, 2015

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-1672?

CVE-2015-1672 has a severity rating of important, which indicates that it can lead to denial of service.

How do I fix CVE-2015-1672?

To fix CVE-2015-1672, ensure that you apply the security updates from Microsoft's MS15-048.

What are the affected versions for CVE-2015-1672?

CVE-2015-1672 affects Microsoft .NET Framework versions 2.0 SP2, 3.5, 3.5.1, 4.0, 4.5, 4.5.1, and 4.5.2.

What type of attack does CVE-2015-1672 address?

CVE-2015-1672 addresses a vulnerability that allows remote attackers to cause a denial of service via crafted encrypted data.

Is CVE-2015-1672 a local or remote vulnerability?

CVE-2015-1672 is classified as a remote vulnerability, allowing attackers to exploit it over the network.