CVE-2015-2526: Medium severity microsoft .net framework 4 vulnerability
Published Sep 9, 2015
·Updated
Microsoft .NET Framework 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to cause a denial of service to an ASP.NET web site via crafted requests, aka "MVC Denial of Service Vulnerability."
Affected Software
4 affected components
Microsoft .NET Framework=4.5
Microsoft .NET Framework=4.5.1
Microsoft .NET Framework=4.5.2
Microsoft .NET Framework=4.6
Event History
Sep 9, 2015
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-2526?
CVE-2015-2526 is rated as having a moderate severity, primarily due to its potential for causing denial of service.
2
How does CVE-2015-2526 impact affected systems?
CVE-2015-2526 can allow remote attackers to disable an ASP.NET web application through specially crafted requests.
3
How do I fix CVE-2015-2526?
To fix CVE-2015-2526, you should apply the latest security updates provided by Microsoft for the .NET Framework.
4
Which .NET Framework versions are affected by CVE-2015-2526?
CVE-2015-2526 affects Microsoft .NET Framework versions 4.5, 4.5.1, 4.5.2, and 4.6.
5
What is the nature of the vulnerability in CVE-2015-2526?
CVE-2015-2526 is a denial of service vulnerability that can be exploited via malicious HTTP requests to an ASP.NET web site.