KLA11068 Denial of Service Vulnerability in Microsoft .NET Framework

An improper handling of web requests has been found in Microsoft Common Object Runtime Library. By exploiting this vulnerability malicious users can cause a denial of service. This vulnerability can be exploited by issuing specially designed requests to the .NET web application.

Original advisories

CVE-2017-8585

Related products

Microsoft-.NET-Framework

CVE list

CVE-2017-8585 warning

KB list

4025342

4025339

4025344

4025338

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Microsoft .NET Framework 4.6Microsoft .NET Framework 4.6.1Microsoft .NET Framework 4.6.2Microsoft .NET Framework 4.7