Design/Logic Flaw

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET...

CVE-2011-1978

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET...

CVE-2011-1977

The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information...

CVE-2011-1978

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET...

CVE-2011-1978

CVE-2011-1978 affects Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, where improper validation of the System.Net.Sockets trust level allows information disclosure or triggering arbitrary outbound network traffic via crafted XBAP, ASP.NET, or .NET Framework applications. Connected sources (MS11-0...

CVE-2011-1977

CVE-2011-1977 describes an information-disclosure vulnerability in Microsoft Chart Control used by ASP.NET Chart controls in .NET Framework 4 and Chart Control for .NET Framework 3.5 SP1. The issue arises from improper verification of functions within URIs, enabling a remote attacker to read arbi...

PT-2011-3519 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 SP2, 3.5.1, and 4 Description: An information disclosure issue exists due to improper validation of the trust level within the System.Net.Sockets namespace. This allows remote attackers to obtain sensitiv...

Patch Tuesday: Microsoft Releases 13 Bulletins, 2 Critical

Microsoft shipped 13 bulletins in the August edition of Patch Tuesday, including two critical fixes for the Internet Explorer Browser and for Windows DNS Server that the company warns could enable remote attacks. The scheduled monthly update includes a a cumulative security update for Internet...

Microsoft .NET Framework 'System.Net.Sockets' Namespace Security Bypass Vulnerability

Description The Microsoft .NET Framework is prone to a security-bypass vulnerability. Attackers can exploit this issue to perform denial-of-service attacks, scan network resources, and obtain potentially sensitive information that was not intended to be disclosed. Technologies Affected Avaya Aura...

MS11-069: Vulnerability in .NET Framework Could Allow Information Disclosure (2567951)

The remote Windows host is running a version of the Microsoft .NET Framework that improperly validates the trust level within the System.Net.Sockets namespace. A remote attacker could exploit this issue by tricking a user into viewing a specially crafted XML file, resulting in information...

MS11-066: Description of the security update for Microsoft Chart Controls for .NET Framework 3.5 Service Pack 1: August 9, 2011

None None...

Microsoft .NET Framework Chart Control Information Disclosure Vulnerability

Description The Microsoft .NET Framework is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to gain access to sensitive information that may aid in further attacks. Attackers can exploit this issue by submitting a specially crafted request to a vulnerable...

Microsoft Releases August Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Internet Explorer, Microsoft Office, Microsoft .NET Framework, and Microsoft Developer Tools as part of the Microsoft Security Bulletin Summary for August 2011. These vulnerabilities may allow an attacker to execute...

Microsoft .NET Framework JIT编译器优化NULL字符串远程代码执行漏洞(MS11-044)

BUGTRAQ ID: 47834 CVE ID: CVE-2011-1271 .NET Framework是用于Windows的新托管代码编程模型。 Microsoft .NET Framework在实现上存在JIT编译器优化NULL字符串远程代码执行漏洞，远程攻击者可利用此漏洞执行任意代码。 此漏洞源于.NET JIT编译器错误地验证了对象中的某些值，通过诱使用户访问带有XBAP的特制网站加以利用。 Microsoft .NET Framework 4.x Microsoft .NET Framework 3.x Microsoft .NET Framework 2.x 厂商补丁：...

CVE-2011-0664

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP...

Design/Logic Flaw

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP...

CVE-2011-0664

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP...

CVE-2011-0664

CVE-2011-0664 affects Microsoft .NET Framework 2.0 SP1/SP2, 3.5 Gold/SP1, 3.5.1, 4.0 and Silverlight 4 before 4.0.60531.0. The issue stems from improper validation of arguments to unspecified networking API functions, enabling remote code execution when processing crafted XBAPs, ASP.NET apps, .NE...

Microsoft Silverlight & .NET Framework非法数组偏移远程代码执行漏洞

Bugtraq ID: 48212 CVE ID：CVE-2011-0664 Microsoft .NET Framework是一个流行的软件开发工具包。Microsoft Silverlight是一个跨浏览器的、跨平台的插件，为Web带来下一代媒体体验和丰富的交互式应用程序体验。 向可信API传递值时存在输入验证错误，攻击者构建特制的XAML浏览器应用XBAP或Silverlight应用，诱使用户解析，可以不安全方式访问内存。成功利用漏洞可以以应用程序安全上下文执行任意代码 Microsoft Silverlight 4.0 Microsoft Silverlight 3.0...

Microsoft .NET Framework Remote Code Execution Vulnerability (2538814)

This host is missing a critical security update according to Microsoft Bulletin MS11-044. OpenVAS Vulnerability Test $Id: secpodms11-044.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft .NET Framework Remote Code Execution Vulnerability 2538814 Authors: Sooraj KS Copyright: Copyright c 2011 SecPod,...