Description
Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."
References
- 1035535 vdb-entry
- 20160412 .NET Framework 4.6 allows side loading of Windows API Set DLL mailing-list
- 20160412 .NET Framework 4.6 allows side loading of Windows API Set DLL mailing-list
- http://packetstormsecurity.com/files/136671/.NET-Framework-4.6-DLL-Hijacking.html
- MS16-041 vendor-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-16-234