Title

Multiple Vulnerabilities in Microsoft .NET Framework (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing multiple vulnerabilities in .NET Framework. The Microsoft .NET Framework is a component of the Microsoft Windows operating system that enables building and running software applications and Web services. To exploit these vulnerabilities, an attacker would create a specially crafted OpenType font (OTF) file using a browser capable of instantiating XBAP applications. If successfully exploited, these vulnerabilities would allow an attacker to execute arbitrary code and compromise the affected systems.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-40753

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.