Vulnerability in Microsoft .Net Framework 2.0 Service Pack 2
CVE-2020-1046
A remote code execution vulnerability exists when Microsoft .NET Framework processes input. An attacker who successfully exploited this vulnerability could take control of an affected system. To exploit the vulnerability, an attacker would…
EPSS: 0.038 (88.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Microsoft .Net Framework 2.0 Service Pack 2 — versions 2.0.0
- Microsoft .Net Framework 3.5 — versions 3.5.0
- Microsoft .Net Framework 3.5.1 — versions 3.5.0
- Microsoft .Net Framework 3.5 And 4.7.2 — versions 4.7.0
- Microsoft .Net Framework 3.5 And 4.8 — versions 4.8.0
- Microsoft .Net_framework — versions 2.0, 3.5, 4.7.2
- Microsoft Windows_10 — versions 1607, 1709, 1803
- Microsoft Windows_7
- Microsoft Windows_8.1
- Microsoft Windows_server_2008 — versions sp2, r2
References
- secure@microsoft.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-1046?
- CVE-2020-1046 is a high-severity vulnerability in Microsoft .Net Framework 2.0 Service Pack 2. CVSS score: 7.8/10. Published 2020-08-17.
- How severe is CVE-2020-1046?
- High severity. CVSS v3 base score is 7.8 out of 10.