PRIOn knowledge basePRION:CVE-2012-0161Design/Logic Flaw
8 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.791 High
EPSS
Percentile
98.2%
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka β.NET Framework Serialization Vulnerability.β
| CPE | Name | Operator | Version |
|---|---|---|---|
| .net_framework | eq | 4.0 | |
| .net_framework | eq | 1.1 sp1 | |
| .net_framework | eq | 2.0 sp2 | |
| .net_framework | eq | 3.5 sp1 | |
| .net_framework | eq | 1.0 sp3 | |
| .net_framework | eq | 3.0 sp2 | |
| .net_framework | eq | 3.5.1 |
References
Related
8 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.791 High
EPSS
Percentile
98.2%