CVE-2016-0033: Code Injection
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 does not prevent recursive compilation of XSLT transforms, which allows remote attackers to cause a denial of service (performance degradation) via crafted XSLT data, aka ".NET Framework Stack Overflow Denial of Service Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0033?
CVE-2016-0033 has a CVSS score indicating a high severity due to its potential for causing denial of service.
How do I fix CVE-2016-0033?
To fix CVE-2016-0033, install the latest updates and patches provided by Microsoft for the affected .NET Framework versions.
What versions of .NET Framework are affected by CVE-2016-0033?
CVE-2016-0033 affects Microsoft .NET Framework versions 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1.
What kind of attack does CVE-2016-0033 facilitate?
CVE-2016-0033 allows remote attackers to exploit the vulnerability for denial of service through crafted XSLT data.
What is the primary impact of CVE-2016-0033 on systems?
The primary impact of CVE-2016-0033 is performance degradation resulting in denial of service on the affected systems.