title: .NET Framework Denial of Service Vulnerability
description: .NET Framework Denial of Service Vulnerability
problem types: Denial of Service
affected:
{
vendor: Microsoft
product: Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
cpes: cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*
platforms: [Windows 7 for 32-bit Systems Service Pack 1, Windows 7 for x64-based Systems Service Pack 1, Windows 8.1 for 32-bit systems, Windows 8.1 for x64-based systems, Windows RT 8.1, Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)]
versions:
version: 4.7.0, lessThan: 4.7.03946.07, versionType: custom, status: affected
version: 4.7.0, lessThan: 4.7.03946.05, versionType: custom, status: affected
version: 4.7.0, lessThan: 4.7.03946.02, versionType: custom, status: affected
version: 4.7.0, lessThan: 4.7.03946.03, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft .NET Framework 4.6.2
cpes: cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*
platforms: [Windows Server 2008 for 32-bit Systems Service Pack 2, Windows Server 2008 for x64-based Systems Service Pack 2]
versions:
version: 4.7.0, lessThan: 4.7.03946.07, versionType: custom, status: affected
version: 4.7.0, lessThan: 4.7.03946.05, versionType: custom, status: affected
}
{
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.6/4.6.2
cpes: cpe:2.3:a:microsoft:.net:3.5:*:*:*:*:*:*:*
platforms: [Windows 10 for 32-bit Systems, Windows 10 for x64-based Systems]
versions:
version: 10.0.0, lessThan: 10.0.10240.19624, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: LOW
baseScore: 3.3
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C
]