{"cvss":0.0,"datePublished":"2014-02-12T00:00:00Z","dateUpdated":"2014-02-12T00:00:00Z","description":"VsaVb7rt.dll in Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in February 2014, aka \"VSAVB7RT ASLR Vulnerability.\"","dueDate":"","id":"CVE-2014-0295","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":".NET Framework","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"VSAVB7RT ASLR Vulnerability","vendor":"Microsoft"}