CVE-2012-0015 Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser appli...
HighCVSS 9.3
EPSS 23.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft net framework | = 2.0-sp2 | No fix listed |
| Microsoft net framework | = 3.5.1 | No fix listed |
References
- TA12-045A third-party-advisory us-government-resource
- MS12-016 vendor-advisory
- oval:org.mitre.oval:def:14513 signature vdb-entry