5262 matches found
OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,...
OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,...
Microsoft .NET Framework Serialization Code Execution (MS12-035; CVE-2012-0161)
A remote code execution vulnerability has been reported in the Microsoft .NET Framework...
Microsoft .NET Framework Serialization Data Validation Error (MS12-035; CVE-2012-0160)
A remote code execution vulnerability has been reported in the Microsoft .NET Framework...
CVE-2012-0160
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP or 2 a crafted .NET Framework application, aka ".NET Framework...
CVE-2012-0161
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application...
Design/Logic Flaw
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application...
Design/Logic Flaw
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP or 2 a crafted .NET Framework application, aka ".NET Framework...
CVE-2012-0161
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application...
Microsoft .NET Framework Remote Code Execution Vulnerability (2693777)
This host is missing a critical security update according to Microsoft Bulletin MS12-035. OpenVAS Vulnerability Test $Id: secpodms12-035.nasl 5366 2017-02-20 13:55:38Z cfi $ Microsoft .NET Framework Remote Code Execution Vulnerability 2693777 Authors: Sooraj KS Copyright: Copyright c 2012 SecPod,...
CVE-2012-0160
CVE-2012-0160 is a high-severity remote code execution vulnerability in Microsoft .NET Framework serialization. It affects multiple .NET Framework versions (1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4) and can be exploited via a crafted XBAP or a crafted .NET Framework application. ...
CVE-2012-0161
CVE-2012-0161 affects Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4. It describes an unspecified exception handling flaw during use of partially trusted assemblies to serialize input data, enabling remote code execution via a crafted XBAP or a crafted .NET Fra...
CVE-2012-0160: Improper Input Validation
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application aka XBAP or 2 a crafted .NET Framework application, aka ".NET Framework...
CVE-2012-0161: Improper Input Validation
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application...
Microsoft .NET Framework Remote Code Execution Vulnerability (2693777)
This host is missing a critical security update according to Microsoft Bulletin MS12-035. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft .NET Framework Serialization CVE-2012-0162 Remote Code Execution Vulnerability
Description Microsoft .NET Framework is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts will likely result in a denial-of-service condition. Technologies...
PT-2012-2360
Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 1.0 SP3 through 4 Description A remote code execution issue exists due to improper serialization of untrusted input through partially trusted assemblies. This allows remote attackers to execute arbitrary code...
PT-2012-2359
Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 1.0 SP3 through 4 Description A remote code execution issue exists due to the improper serialization of untrusted input. This could allow an attacker to take complete control of an affected system, enabling th...
OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,...
OpenJDK: incomplete info in the deserialization exception (Serialization, 7110700)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,...