PRIOn knowledge basePRION:CVE-2011-0664Design/Logic Flaw
8.1 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.261 Low
EPSS
Percentile
96.6%
Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka β.NET Framework Array Offset Vulnerability.β
| CPE | Name | Operator | Version |
|---|---|---|---|
| .net_framework | eq | 4.0 | |
| .net_framework | eq | 3.5.1 | |
| .net_framework | eq | 2.0 sp2 | |
| .net_framework | eq | 3.5 sp1 | |
| .net_framework | eq | 2.0 sp1 | |
| .net_framework | eq | 3.5 | |
| silverlight | eq | 4.0.60310.0 |
Related
8.1 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.261 Low
EPSS
Percentile
96.6%