CVE-2016-0047: Infoleak

Published Feb 10, 2016

Updated

WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."

Affected Software

6 affected components

Microsoft .NET Framework=2.0-sp2

Microsoft .NET Framework=3.5

Microsoft .NET Framework=3.5.1

Microsoft .NET Framework=4.5.2

Microsoft .NET Framework=4.6

Microsoft .NET Framework=4.6.1

Event History

Feb 10, 2016

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0047?

CVE-2016-0047 is rated as important in severity due to the potential for information disclosure.

How do I fix CVE-2016-0047?

To address CVE-2016-0047, you should apply the security updates provided by Microsoft for the affected .NET Framework versions.

Which versions of the .NET Framework are affected by CVE-2016-0047?

CVE-2016-0047 affects .NET Framework versions 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1.

What kind of vulnerability is CVE-2016-0047?

CVE-2016-0047 is classified as an information disclosure vulnerability that can be exploited through crafted icon data.

Can CVE-2016-0047 be exploited remotely?

Yes, CVE-2016-0047 allows remote attackers to obtain sensitive information from process memory.