CVE-2012-0163

2012-04-1021:00:00

microsoft

www.cve.org

7.4 High

AI Score

Confidence

Low

0.661 Medium

EPSS

Percentile

97.9%

JSON

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka “.NET Framework Parameter Validation Vulnerability.”