PT-2012-2359

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 1.0 SP3 through 4 Description A remote code execution issue exists due to the improper serialization of untrusted input. This could allow an attacker to take complete control of an affected system, enabling th...

Microsoft Releases May Security Bulletin

Microsoft has released updates to address vulnerabilities in Microsoft Windows, Office, .NET Framework, and Silverlight as part of the Microsoft Security Bulletin Summary for May 2012. These vulnerabilities may allow an attacker to execute arbitrary code or operate with elevated privileges. US-CE...

MS12-035: Vulnerabilities in the .NET Framework could allow remote code execution: May 8, 2012

Resolves a vulnerability in the .NET Framework that could allow remote code execution on a client system if a user views a specially crafted webpage by using a web browser that can run XAML Browser Applications XBAPs.IntroductionMicrosoft has released the security bulletin MS12-035. You can view...

PT-2012-2361

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework version 4 Description A remote code execution issue exists due to improper buffer allocation. This allows attackers to execute arbitrary code via a crafted XAML browser application or a specially crafted .NET Framework...

PT-2012-2360

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 1.0 SP3 through 4 Description A remote code execution issue exists due to improper serialization of untrusted input through partially trusted assemblies. This allows remote attackers to execute arbitrary code...

PT-2012-2363

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework version 4 Description A denial of service issue exists due to improper comparison of index values in .NET Framework, allowing remote attackers to cause applications created using Windows Presentation Foundation WPF API...

Patch Tuesday Advance Notification: May Edition

Microsoft announced today that they will be shipping three critical and five important bulletins in the May edition of patch Tuesday. All of the ‘critical’ bulletins and two of the ‘important’ bulletins fix vulnerabilities that could otherwise lead to remote code execution. The two remaining...

Microsoft Releases Advanced Notification for May Security Bulletin

Microsoft has issued a Security Bulletin Advanced Notification indicating that its May release will contain seven bulletins. These bulletins will have the severity rating of critical and important and will be for Microsoft Windows, Office, .NET Framework, and Silverlight. Releases of these...

Microsoft .NET Framewor参数校验远程整数溢出漏洞(MS12-025)

Microsoft .NET Framework是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统 Microsoft .NET Framework的EncoderParameter类存在一个整数溢出漏洞，由于不正确分配缓冲区，拷贝用户数据到堆缓冲区时可导致堆破坏 EncoderParameter中System.Drawing.dll中实现，用于向图像解码器GDI+传递值或值的数组 利用此漏洞，以部分可信权限运行的应用程序可绕过CLR沙盒限制，最终可以以完全可信权限执行任意代码。部分可信应用程序的例子包括ClickOnce, XAML Browser Applicatio...

Microsoft .NET Framework EncoderParameter - Integer Overflow (MS12-025)

------------------------------------------------------------------------ .NET Framework EncoderParameter integer overflow vulnerability ------------------------------------------------------------------------ Yorick Koster, September 2011...

.NET Framework EncoderParameter Integer Overflow

Exploit for windows platform in category dos / poc ------------------------------------------------------------------------ .NET Framework EncoderParameter integer overflow vulnerability ------------------------------------------------------------------------ Yorick Koster, September 2011...

Microsoft .NET Framework EncoderParameter - Integer Overflow (MS12-025)

Microsoft .NET Framework EncoderParameter - Integer Overflow MS12-025 ------------------------------------------------------------------------ .NET Framework EncoderParameter integer overflow vulnerability ------------------------------------------------------------------------ Yorick Koster,...

.NET Framework EncoderParameter Integer Overflow

------------------------------------------------------------------------ .NET Framework EncoderParameter integer overflow vulnerability ------------------------------------------------------------------------ Yorick Koster, September 2011...

.NET Framework EncoderParameter integer overflow vulnerability

------------------------------------------------------------------------ .NET Framework EncoderParameter integer overflow vulnerability ------------------------------------------------------------------------ Yorick Koster, September 2011...

Microsoft .NET Framework CRL参数解析漏洞 (MS12-025)

BUGTRAQ ID: 52921 CVE ID: CVE-2012-0163 ASP.NET是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统。 Microsoft .NET Framework在处理传递到函数的某些参数时，.NET CRL Common Language Runtime中存在错误，可通过特制的网页利用，导致控制用户系统。 0 Microsoft .NET Framework 4.x Microsoft .NET Framework 3.x Microsoft .NET Framework 2.x Microsoft .NET Framework 1.x...

Microsoft .NET Framework Remote Code Execution Vulnerability (2671605)

This host is missing a critical security update according to Microsoft Bulletin MS12-025. OpenVAS Vulnerability Test $Id: secpodms12-025.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft .NET Framework Remote Code Execution Vulnerability 2671605 Authors: Sooraj KS Copyright: Copyright c 2012 SecPod,...

MS12-025: Vulnerability in .NET Framework Could Allow Remote Code Execution (2671605)

The version of the .NET Framework installed on the remote host reportedly is affected by a code execution vulnerability because of the way .NET Framework validates parameters when passing data to a function. An attacker may be able to leverage these vulnerabilities to execute arbitrary code on th...

Microsoft .NET Framework Remote Code Execution Vulnerability (2671605)

This host is missing a critical security update according to Microsoft Bulletin MS12-025. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-0163

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET application, or 3 a crafted .NET Framework...

Input validation

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP, 2 a crafted ASP.NET application, or 3 a crafted .NET Framework...