Detections
Analytics
MS09-061: Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378)
high Nessus Plugin ID 42117
Synopsis
The Microsoft .NET Common Language Runtime is affected by multiple vulnerabilities.Description
The remote Windows host is running a version of the Microsoft .NET Framework that is affected by multiple vulnerabilities :- A remote code execution vulnerability exists in the Microsoft .NET Framework that could allow a malicious Microsoft .NET application to obtain a managed pointer to stack memory that is no longer used. The malicious Microsoft .NET application could then use this pointer to modify legitimate values placed at that stack location later, leading to arbitrary, unmanaged code execution.
Microsoft .NET applications that are not malicious are not at risk for being compromised because of this vulnerability.(CVE-2009-0090)
- A remote code execution vulnerability exists in the Microsoft .NET Framework that could allow a malicious Microsoft .NET application to bypass a type equality check. The malicious Microsoft .NET could exploit this vulnerability by casting an object of one type into another type, leading to arbitrary, unmanaged code execution. Microsoft .NET applications that are not malicious are not at risk for being compromised because of this vulnerability.(CVE-2009-0091)
- A remote code execution vulnerability exists in the Microsoft .NET Framework that can allow a malicious Microsoft .NET application or a malicious Silverlight application to modify memory of the attacker's choice, leading to arbitrary, unmanaged code execution. Microsoft .NET applications and Silverlight applications that are not malicious are not at risk for being compromised because of this vulnerability.(CVE-2009-2497)
Solution
Microsoft has released a set of patches for .NET Framework 1.1, 2.0 and 3.5.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2009/ms09-061
Plugin Details
Severity: High
ID: 42117
File Name: smb_nt_ms09-061.nasl
Version: 1.29
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 10/14/2009
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:microsoft:silverlight, cpe:/o:microsoft:windows, cpe:/a:microsoft:.net_framework
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/13/2009
Vulnerability Publication Date: 10/13/2009
Exploitable With
CANVAS (CANVAS)