Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-0257
HistoryFeb 12, 2014 - 4:50 a.m.

CVE-2014-0257

2014-02-1204:50:39
CWE-20
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.766 High

EPSS

Percentile

98.2%

JSON

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via (1) a crafted web site or (2) a crafted .NET Framework application that exposes a COM server endpoint, aka β€œType Traversal Vulnerability.”

Affected configurations

NVD
Node
microsoft.net_frameworkMatch1.0sp3
OR
microsoft.net_frameworkMatch1.1sp1
OR
microsoft.net_frameworkMatch2.0sp2
OR
microsoft.net_frameworkMatch3.5
OR
microsoft.net_frameworkMatch3.5.1
OR
microsoft.net_frameworkMatch4.0
OR
microsoft.net_frameworkMatch4.5
OR
microsoft.net_frameworkMatch4.5.1

Related

seebug 2
hackerone 1
symantec 1
cvelist 1
packetstorm 1
myhack58 1
prion 1
cve 1
metasploit 1
exploitdb 1
nessus 1
openvas 2
mskb 1
googleprojectzero 1
securityvulns 1
kaspersky 1
seebug
seebug
Microsoft .NET Framework θΏœη¨‹ζƒεˆ©ζε‡ζΌζ΄ž(CVE-2014-0257)(MS14-009)
2014-02-12 00:00:00
MS14-009 .NET Deployment Service IE Sandbox Escape
2014-07-01 00:00:00
hackerone
hackerone
Sandbox Escape: .NET Type Traversal Vulnerability
2014-02-11 00:00:00
symantec
symantec
Microsoft .NET Framework CVE-2014-0257 Remote Privilege Escalation Vulnerability
2014-02-11 00:00:00
cvelist
cvelist
CVE-2014-0257
2014-02-12 02:00:00
packetstorm
packetstorm
MS14-009 .NET Deployment Service IE Sandbox Escape
2014-06-27 00:00:00
myhack58
myhack58
How to use. NET managed DCOM to achieve elevation of privilege-vulnerability warning-the black bar safety net
2017-05-19 00:00:00
prion
prion
Design/Logic Flaw
2014-02-12 04:50:00
cve
cve
CVE-2014-0257
2014-02-12 04:50:39
metasploit
metasploit
MS14-009 .NET Deployment Service IE Sandbox Escape
2014-05-29 16:45:19
exploitdb
exploitdb
Microsoft .NET Deployment Service - IE Sandbox Escape (MS14-009) (Metasploit)
2014-06-27 00:00:00
nessus
nessus
MS14-009: Vulnerabilities in .NET Framework Could Allow Privilege Escalation (2916607)
2014-02-12 00:00:00
openvas
openvas
Microsoft .NET Framework Multiple Vulnerabilities (2916607)
2014-02-12 00:00:00
Microsoft .NET Framework Multiple Vulnerabilities (2916607)
2014-02-12 00:00:00
mskb
mskb
MS14-009: Vulnerabilities in the .NET Framework could allow elevation of privilege: February 11, 2014
2014-02-11 00:00:00
googleprojectzero
googleprojectzero
Exploiting .NET Managed DCOM
2017-04-28 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2014-02-11 00:00:00
kaspersky
kaspersky
KLA10603 Multiple vulnerabilities in Microsoft .NET Framework
2014-11-11 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.766 High

EPSS

Percentile

98.2%

JSON
Related for NVD:CVE-2014-0257
seebug2hackerone1symantec1cvelist1packetstorm1myhack581prion1cve1metasploit1exploitdb1nessus1openvas2mskb1googleprojectzero1securityvulns1kaspersky1