CVE-2015-6115: Infoleak

Published Nov 11, 2015

Updated

Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka ".NET ASLR Bypass."

Affected Software

3 affected components

Microsoft .NET Framework=2.0-sp2

Microsoft .NET Framework=3.5

Microsoft .NET Framework=3.5.1

Event History

Nov 11, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6115?

CVE-2015-6115 has a high severity rating due to its potential to allow remote attackers to bypass ASLR protections in affected .NET Framework versions.

What systems are affected by CVE-2015-6115?

CVE-2015-6115 affects Microsoft .NET Framework versions 2.0 SP2, 3.5, and 3.5.1.

How do I fix CVE-2015-6115?

To address CVE-2015-6115, it is recommended to apply the latest security updates provided by Microsoft for affected .NET Framework versions.

What type of attack does CVE-2015-6115 facilitate?

CVE-2015-6115 enables remote attackers to exploit a vulnerability that bypasses the Address Space Layout Randomization (ASLR) protection mechanism.

Is there a workaround for CVE-2015-6115?

There is no official workaround for CVE-2015-6115; the only mitigation is to apply the relevant security updates from Microsoft.