Test ID:	1.3.6.1.4.1.25623.1.0.814744
Category:	Windows : Microsoft Bulletins
Title:	Microsoft .NET Framework Multiple Vulnerabilities (KB4483458)
Summary:	This host is missing an important security; update according to Microsoft KB4483458
Description:	Summary: This host is missing an important security update according to Microsoft KB4483458 Vulnerability Insight: Multiple flaws exist due to: - An error in .NET Framework when the software fails to check the source markup of a file. - An error in certain .Net Framework API's in the way they parse URL's. Vulnerability Impact: Successful exploitation will allow an attacker to bypass security logic intended to ensure that a user-provided URL belonged to a specific hostname or a subdomain of that hostname and run arbitrary code in the context of the current user. Affected Software/OS: - Microsoft .NET Framework 3.5.1 on Microsoft Windows 7 for 32-bit/x64 Systems Service Pack 1 - Microsoft Windows Server 2008 R2 for x64-based Systems Service Pack 1 Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-0657 BugTraq ID: 106890 http://www.securityfocus.com/bid/106890 RedHat Security Advisories: RHSA-2019:0349 https://access.redhat.com/errata/RHSA-2019:0349 Common Vulnerability Exposure (CVE) ID: CVE-2019-0613 BugTraq ID: 106872 http://www.securityfocus.com/bid/106872
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.