Lucene search
+L

239 matches found

NVD
NVD
added 2011/05/10 7:55 p.m.36 views

CVE-2011-1271

The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent attackers to bypass intended access restrictions, and consequently execute arbitrary...

7.7CVSS6.9AI score0.20096EPSS
SaveExploits3References3
Prion
Prion
added 2011/05/10 7:55 p.m.22 views

Design/Logic Flaw

The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent attackers to bypass intended access restrictions, and consequently execute arbitrary...

5.1CVSS7.4AI score0.20096EPSS
SaveExploits3References3Affected Software1
CVE
CVE
added 2011/05/10 7:00 p.m.105 views

CVE-2011-1271

The CVE describes a JIT optimization flaw in Microsoft .NET Framework that mishandles null-string expressions, enabling context-dependent attackers to execute arbitrary code. Affected products/variants include .NET Framework 3.5 Gold/SP1 (and 3.5.1) and 4.0 when IsJITOptimizerDisabled is false. E...

7.7CVSS7AI score0.20096EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2011/05/10 7:00 p.m.47 views

CVE-2011-1271

The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent attackers to bypass intended access restrictions, and consequently execute arbitrary...

6.8AI score0.20096EPSS
SaveExploits3References3
EUVD
EUVD
added 2011/05/10 7:00 p.m.14 views

EUVD-2011-1279

The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent attackers to bypass intended access restrictions, and consequently execute arbitrary...

7.7CVSS6.7AI score0.20096EPSS
SaveExploits3References3
Vulnrichment
Vulnrichment
added 2011/05/10 7:00 p.m.18 views

CVE-2011-1271

The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent attackers to bypass intended access restrictions, and consequently execute arbitrary...

7.2AI score0.20096EPSS
SaveExploits3References3
Prion
Prion
added 2011/04/13 6:55 p.m.34 views

Memory corruption

The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET application, or 3 a crafted .NET Framework...

9.3CVSS8.1AI score0.23593EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2011/04/13 6:55 p.m.31 views

CVE-2010-3958

The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET application, or 3 a crafted .NET Framework...

9.3CVSS7.4AI score0.23593EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2011/04/13 6:00 p.m.33 views

CVE-2010-3958

The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET application, or 3 a crafted .NET Framework...

7.4AI score0.23593EPSS
SaveExploits0References3
CVE
CVE
added 2011/04/13 6:00 p.m.72 views

CVE-2010-3958

The CVE-2010-3958 issue affects Microsoft .NET Framework: x86 JIT compiler in .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0. An attacker can trigger remote code execution by delivering a crafted XAML browser application (XBAP), a crafted ASP.NET application, or a crafted .NET Framework applicat...

9.3CVSS7.6AI score0.23593EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2011/04/13 12:00 a.m.36 views

Microsoft .NET Framework Remote Code Execution Vulnerability (2484015)

This host is missing a critical security update according to Microsoft Bulletin MS11-028. OpenVAS Vulnerability Test $Id: secpodms11-028.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft .NET Framework Remote Code Execution Vulnerability 2484015 Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...

9.3CVSS0.5AI score0.23593EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2011/04/13 12:00 a.m.52 views

Microsoft .NET Framework Remote Code Execution Vulnerability (2484015)

This host is missing a critical security update according to Microsoft Bulletin MS11-028. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5.1AI score0.23593EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2011/04/13 12:00 a.m.47 views

MS11-028: Vulnerability in .NET Framework Could Allow Remote Code Execution (2484015)

The x86 JIT compiler included with the version of the .NET Framework installed on the remote host incorrectly compiles certain types of function calls. An attacker may be able to leverage this vulnerability to run arbitrary code on the affected system under either of the following scenarios : -...

9.3CVSS5.6AI score0.23593EPSS
SaveExploits0References2
exploitpack
exploitpack
added 2011/03/04 12:00 a.m.25 views

Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution

Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution source: https://www.securityfocus.com/bid/47834/info The Microsoft .NET Framework is prone to a remote code-execution vulnerability that affects the Just-In-Time JIT compiler optimization on x86 architectures...

8.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2011/03/04 12:00 a.m.36 views

Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution

source: https://www.securityfocus.com/bid/47834/info The Microsoft .NET Framework is prone to a remote code-execution vulnerability that affects the Just-In-Time JIT compiler optimization on x86 architectures. Successful exploits may allow an attacker to execute arbitrary code in the context of t...

7.7CVSS5.2AI score0.20096EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2010/12/20 12:00 a.m.34 views

Fedora 13 : clamav-0.96.5-1300.fc13 (2010-18564)

Sat Dec 4 2010 Enrico Scholz - 0.96.5-1300 - updated to 0.96.5 - CVE-2010-4260 Multiple errors within the processing of PDF files can be exploited to e.g. cause a crash. - CVE-2010-4261 An off-by-one error within the 'iconcb' function can be exploited to cause a memory corruption. - Sun Oct 31...

7.5CVSS5.8AI score0.04904EPSS
SaveExploits0References5
NVD
NVD
added 2010/10/13 7:00 p.m.24 views

CVE-2010-3228

The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework x64 JIT Compiler Vulnerability."...

9.3CVSS7.4AI score0.19399EPSS
SaveExploits1References3
Prion
Prion
added 2010/10/13 7:00 p.m.27 views

Memory corruption

The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework x64 JIT Compiler Vulnerability."...

9.3CVSS8AI score0.19399EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2010/10/13 6:00 p.m.45 views

CVE-2010-3228

The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit platforms does not properly perform optimizations, which allows remote attackers to execute arbitrary code via a crafted .NET application that triggers memory corruption, aka ".NET Framework x64 JIT Compiler Vulnerability."...

7.4AI score0.19399EPSS
SaveExploits1References3
CVE
CVE
added 2010/10/13 6:00 p.m.96 views

CVE-2010-3228

The CVE-2010-3228 issue is a remote code execution vulnerability in the .NET Framework 4.0 JIT compiler on x64/Itanium. The root cause is incorrect optimizations in the JIT that lead to memory corruption when XBAPs or specially crafted Web content are processed. Exploitation requires a user to vi...

9.3CVSS7.5AI score0.19399EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder