CVE-2016-0047

WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."

Score

CVSS 3.0 7.5 High

Status

Modified - secure@microsoft.com

Published

2016-02-10

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• .net Framework (Microsoft)

References

• http://www.securitytracker.com/id/1034983
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-019