Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
{
"unresolved_ranges": [
{
"extracted_events": [
{
"introduced": "4.8"
},
{
"last_affected": "4.8"
},
{
"introduced": "4.6.2"
},
{
"last_affected": "4.6.2"
},
{
"introduced": "4.7"
},
{
"last_affected": "4.7"
},
{
"introduced": "4.7.1"
},
{
"last_affected": "4.7.1"
},
{
"introduced": "4.7.2"
},
{
"last_affected": "4.7.2"
},
{
"introduced": "3.5-NA"
},
{
"last_affected": "3.5-NA"
},
{
"introduced": "4.8.1"
},
{
"last_affected": "4.8.1"
},
{
"introduced": "3.5-NA"
},
{
"last_affected": "3.5-NA"
},
{
"introduced": "4.8"
},
{
"last_affected": "4.8"
},
{
"introduced": "3.5-NA"
},
{
"last_affected": "3.5-NA"
},
{
"introduced": "4.7.2"
},
{
"last_affected": "4.7.2"
},
{
"introduced": "3.5-NA"
},
{
"last_affected": "3.5-NA"
}
],
"source": "CPE_STRING",
"vendor_product": "microsoft:.net_framework",
"cpes": [
"cpe:2.3:a:microsoft:.net_framework:3.5:-:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.8.1:*:*:*:*:*:*:*",
"cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*"
]
}
]
}