CVE-2020-1147

Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability

.Net Core

A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the source markup of XML file input, aka '.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability'.

15. Jul 2020

Ausgewertete Quellen

• Microsoft
  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1147
• Hinweis
  http://packetstormsecurity.com/files/158694/SharePoint-DataSet-DataTable-Deserialization.html
• Hinweis
  http://packetstormsecurity.com/files/158876/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html
• Hinweis
  http://packetstormsecurity.com/files/163644/Microsoft-SharePoint-Server-2019-Remote-Code-Execution.html
• Hinweis
  https://www.exploitalert.com/view-details.html?id=35992
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1147
• CISA
  Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
• NVD
  CVE-2020-1147