113 matches found
CVE-2013-0073: Undefined Security Weakness
The Windows Forms aka WinForms component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 ...
Microsoft .NET Framework 远程权限提升漏洞(CVE-2013-0002)
Bugtraq ID:57126 CVE ID: CVE-2013-0002 Microsoft .NET Framework是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统。 Microsoft .NET WinForms方法没有正确校验内存中的对象数量，在拷贝这些对象到数组之前缺少正确的边界检查，可触发缓冲区溢出。攻击者可以构建特制的XMAL浏览器应用XBAP或不可信的.Net应用，诱使用户解析，可完全控制应用系统，执行任意代码。 0 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0...
Buffer overflow
Buffer overflow in the Windows Forms aka WinForms component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 a crafted .NET Framework application that leverag...
CVE-2013-0001
CVE-2013-0001 concerns a vulnerability in the Windows Forms (WinForms) component of Microsoft .NET Framework (1.0 SP3–4.5). The root cause is improper initialization of memory arrays and use of a pointer to unmanaged memory, enabling information disclosure. Exploitation could occur via a crafted ...
CVE-2013-0002
Microsoft .NET Framework WinForms Buffer Overflow (CVE-2013-0002) is triggered by improper counting of objects during a memory copy in Windows Forms, allowing remote code execution via a crafted XBAP or a crafted .NET application. Affected versions span 1.0 SP3 through 4.5. The root cause is a ra...
Microsoft .NET Framework Privilege Elevation Vulnerability (2769324)
This host is missing an important security update according to Microsoft Bulletin MS13-004. OpenVAS Vulnerability Test $Id: secpodms13-004.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework Privilege Elevation Vulnerability 2769324 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPo...
SLES10: Security update for Mono
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mono-core mono-data mono-data-firebird mono-data-oracle mono-data-postgresql mono-data-sqlite mono-data-sybase mono-locale-extras mono-nunit mono-web...
SLES11: Security update for Mono
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mono-core mono-data mono-data-postgresql mono-data-sqlite mono-locale-extras mono-nunit mono-web mono-winforms More details may also be found by searching fo...
Fedora Update for mono FEDORA-2007-067
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
openSUSE 10 Security Update : bytefx-data-mysql (bytefx-data-mysql-4597)
This update fixes a buffer overflow in Mono's BigInteger implementation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update bytefx-data-mysql-4597. The text description of this plugin is C SUSE...
openSUSE 10 Security Update : mono-core (mono-core-2373)
By appending spaces to URLs and attackers could download the source code of scripts that normally get executed by the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update mono-core-2373...
Fedora Core 5 : mono-1.1.13.7-2.fc5.1 (2006-1012)
CVE-2006-5072 Mono insecure temporary file usage Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
