@tiraniddo not as scary as their descriptions ;)
Prikaži ovu nit
So my Jan 2020 .NET patches were not as scary as they looked:
CVE-2020-0606: Code Execution using Malicious Annotation Files for Sticky Notes in WPF apps
CVE-2020-0605: Dangerous deserialization in handling XPS files in .NET Framework
CVE-2020-0646 -> I have no idea atm
-
-
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
CVE-2020-0605 is actually interesting, no? It makes a reliable client-side RCE when delivered via email. I'm curious if: A: Exchange handles & previews XPS in a vulnerable way? B: It can be exploited via OWA somehow?
-
I don’t recall they use .net to load xps but I might be wrong
Kraj razgovora
Novi razgovor -
-
-
Hey Soroush, I dropped you an email from secure@ to clear up the confusion on CVE-2020-0646
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.