CVE-2015-6115: Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka ".NET ASLR Bypass."

Unscored severity · published Nov 11, 2015

CVE-2015-6115

Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka ".NET ASLR Bypass."

–

CVSS

13.5%

EPSS

On KEV

Exploitation

Is it being used?

Exploit prediction (EPSS)13.5% · higher than 96% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

.net Framework · Microsoft

2.0; 3.5; 3.5.1 · source: NVD

Affected product

.net Framework

Microsoft

All .net Framework CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2015-6115

CVE.org

https://www.cve.org/CVERecord?id=CVE-2015-6115

www.securitytracker.com

http://www.securitytracker.com/id/1034116

docs.microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-118