CVE-2014-4122

EUVD-2014-4053
Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 omits the ASLR protection mechanism, which allows remote attackers to obtain potentially sensitive information about memory addresses by leveraging the predictability of an executable image's location, aka ".NET ASLR Vulnerability."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
microsoft.net_framework
2.0:sp2
microsoft.net_framework
3.5
microsoft.net_framework
3.5.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/60969
http://www.securityfocus.com/bid/70312
http://www.securitytracker.com/id/1031021
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057
http://secunia.com/advisories/60969
http://www.securityfocus.com/bid/70312
http://www.securitytracker.com/id/1031021
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057