CVE-2013-1337

The CVE-2013-1337 issue affects Microsoft .NET Framework (notably 4.x, including 4.5) where custom WCF endpoint authentication policy is not created correctly in scenarios involving HTTPS passwords. This results in an authentication bypass vulnerability that could let an attacker access endpoint ...

CVE-2013-1336

CVE-2013-1336 affects Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5. The vulnerability arises because the CLR does not properly validate signatures, enabling an attacker to modify signed XML files without breaking the signature (XML Digital Signature Spoofing). This is tied to the MS13...

Microsoft .NET Framework Authentication Bypass and Spoofing Vulnerabilities (2836440)

This host is missing an important security update according to Microsoft Bulletin MS13-040. OpenVAS Vulnerability Test $Id: secpodms13-040.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework Authentication Bypass and Spoofing Vulnerabilities 2836440 Authors: Thanga Prakash S Copyright:...

MS13-040: Vulnerabilities in .NET Framework Could Allow Spoofing (2836440)

The remote Windows host is running a version of the Microsoft .NET Framework that is affected by multiple vulnerabilities : - A spoofing vulnerability exists that could allow an attacker to modify the contents of an XML file without invalidating the signature associated with the file. CVE-2013-13...

Microsoft .NET Framework Authentication Bypass and Spoofing Vulnerabilities (2836440)

This host is missing an important security update according to Microsoft Bulletin MS13-040. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft .NET Framework 3.5 on Windows 8 and Windows Server 2012 for x64-based Systems (KB2804584)

A security issue has been identified that could allow an attacker to misrepresent a system action or behavior without the knowledge of the user. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...

Microsoft .NET Framework CVE-2013-1337 Authentication Bypass Vulnerability

Description Microsoft .NET Framework is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and gain unauthorized access to the application. This allows attackers to obtain sensitive information and perform unauthorized actio...

Microsoft .NET Framework XML Digital Signature CVE-2013-1336 Security Bypass Vulnerability

Description Microsoft .NET Framework is prone to a security-bypass vulnerability because it fails to properly validate the signature of a specially crafted XML file. Attackers can exploit this issue to bypass XML digital signature validation and spoof XML content by conducting man-in-the-middle...

MS13-040: Vulnerabilities in the .NET Framework could allow spoofing: May 14, 2013

Resolves a vulnerability in the Microsoft .NET Framework that could allow identity spoofing on a client system.View products that this article applies to.IntroductionResolves a vulnerability in the Microsoft .NET Framework that could allow identity spoofing on a client system.SummaryMicrosoft has...

Microsoft IIS 6. 0 and 7. 5 multiple vulnerabilities and the use of method-vulnerability warning-the black bar safety net

Microsoft IIS 6.0 install PHP to bypass authentication vulnerability Microsoft IIS with PHP 6.0, which is on PHP5 in Windows Server 2 0 0 3 SP1 test detail: An attacker can send a special request is sent to the IIS 6.0 Service, successfully bypass access restrictions The attacker can access the...

Microsoft .NET Framework WinForms Buffer Overflow (CVE-2013-0002)

A buffer overflow vulnerability exists in Microsoft .NET Framework Windows Form. The vulnerability is due to a race condition when handling the size of an array of objects prior to copying them into a global memory buffer.An attacker can remotely exploit this vulnerability by enticing a user to...

Microsoft .NET Framework S.DS.P Namespace Method Buffer Overflow (CVE-2013-0003)

A buffer overflow exists in the System.DirectoryServices.Protocols S.DS.P namespace method in the .NET framework. The vulnerability is due to an error in the validation of the size of objects in memory prior to copying them into an array.An attacker can remotely exploit this vulnerability by...

Microsoft .NET Framework WinForms Information Disclosure (CVE-2013-0001)

A remote code execution vulnerability has been reported in the Microsoft .NET Framework. The vulnerability is due to the way WinForms handles pointers to unmanaged memory locations.A remote, unauthenticated attacker can exploit this vulnerability by either enticing a user to visit a maliciously...

.NET Framework EncoderParameter integer overflow vulnerability(MS12-025)

No description provided by source. run 'rundll32 dfshim CleanOnlineAppCache' to clear ClickOnce cache require 'msf/core' require 'base64' require 'digest/sha1' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::HttpServer::HTML def initializeinfo =...

CVE-2013-0073

The Windows Forms aka WinForms component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 ...

Privilege escalation

The Windows Forms aka WinForms component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 ...

CVE-2013-0073

CVE-2013-0073 affects the Windows Forms component of Microsoft .NET Framework (versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5). The root cause is improper restriction of privileges for a callback function during object creation, which can allow remote attackers to execute arbitrary code via a crafted XBAP ...

CVE-2013-0073

The Windows Forms aka WinForms component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 ...

Microsoft .NET Framework Privilege Elevation Vulnerability (2800277)

This host is missing an important security update according to Microsoft Bulletin MS13-015. OpenVAS Vulnerability Test $Id: secpodms13-015.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework Privilege Elevation Vulnerability 2800277 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPo...

Microsoft .NET Framework Privilege Elevation Vulnerability (2800277)

This host is missing an important security update according to Microsoft Bulletin MS13-015. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...