The Microsoft .NET Core SDK installation on the remote host is version affected by a remote code execution vulnerability when parsing maliciously crafted xps files.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A remote code execution vulnerability exists in .NET Core 3.1, .NET 6.0, and .NET 7.0, where a malicious actor could cause a user to run arbitrary code as a result of parsing maliciously crafted xps files.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A remote code execution vulnerability exists in ASP.NET core 3.1, ASP.NET 6.0, and ASP.NET 7.0, where a malicious actor could cause a user to run arbitrary code as a result of parsing maliciously crafted xps files.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Microsoft Visual Studio Products are affected by a remote code execution vulnerability in .NET Core 3.1, .NET 6.0, and .NET 7.0, where a malicious actor could cause a user to run arbitrary code as a result of parsing maliciously crafted xps files.

 Note that Nessus has not tested for this issue but has instead relied only on the application's  self-reported version number.

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the handling of XPS files.

ID	Name	Product	Family	Published	Updated	Severity
168827	Security Update for .NET Core SDK (December 2022)	Nessus	Windows	12/15/2022	11/20/2023	high
168747	Security Updates for Microsoft .NET Core (December 2022)	Nessus	Windows	12/15/2022	1/16/2024	high
168826	Security Updates for Microsoft ASP.NET Core (December 2022)	Nessus	Windows : Microsoft Bulletins	12/15/2022	11/20/2023	high
168678	Security Updates for Microsoft Visual Studio Products (Dec 2022)	Nessus	Windows : Microsoft Bulletins	12/13/2022	11/20/2023	high
168745	Security Updates for Microsoft .NET Framework (December 2022)	Nessus	Windows : Microsoft Bulletins	12/15/2022	11/20/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high