Microsoft .NET Framework JIT编译器远程溢出漏洞（MS07-040）

BUGTRAQ ID: 24811 CVECAN ID: CVE-2007-0043 Microsoft .NET Framework是一个流行的软件开发工具包。 .NET Framework JIT编译器处理包含恶意数据的网页时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 .NET Framework...

Microsoft .NET Framework Remote Code Execution Vulnerabilities (931212)

Binary data 4120.prm...

Microsoft .NET Framework Remote Code Execution Vulnerabilities (931212)

Binary data 4119.prm...

Microsoft .NET Framework Remote Code Execution Vulnerabilities (931212)

Binary data 4121.prm...

Microsoft .NET Framework Version Detection

Binary data 4128.prm...

Design/Logic Flaw

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring o...

Buffer overflow

The Just In Time JIT Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT...

Buffer overflow

The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow...

CVE-2007-0041

The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow...

CVE-2007-0041

The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow...

CVE-2007-0042

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring o...

CVE-2007-0041

CVE-2007-0041 is the PE Loader vulnerability in Microsoft .NET Framework (versions 1.0, 1.1 and 2.0) on Windows 2000/XP/Server 2003/Vista. The root cause is an unchecked buffer/unvalidated message lengths in the PE Loader service, leading to a potential remote code execution (buffer overflow) whe...

CVE-2007-0043

CVE-2007-0043 corresponds to the .NET JIT Compiler vulnerability described in MS07-040. Affects Microsoft .NET Framework 1.0/1.1/2.0 on Windows 2000/XP/Server 2003/Vista, due to an unchecked buffer in the JIT compiler that could allow remote code execution when a user is manipulated into visiting...

Microsoft .NET Framework JIT Compiler Remote Buffer Overflow Vulnerability

Description Microsoft .NET Framework is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of a user running the application. Successful exploits ca...

Microsoft .NET Framework PE Loader Remote Buffer Overflow Vulnerability

Description Microsoft .NET Framework is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of a user running the application. Successful exploits ca...

CVE-2007-0041: Improper Restriction of Operations within the Bounds of a Memory Buffer

The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow...

CVE-2007-0042: Exposure of Sensitive Information to an Unauthorized Actor

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring o...

CVE-2007-0043: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Just In Time JIT Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT...

Microsoft .Net Framework 2.0 - Multiple Null Byte Injection Vulnerabilities

Microsoft .Net Framework 2.0 - Multiple Null Byte Injection Vulnerabilities source: https://www.securityfocus.com/bid/24791/info Microsoft .NET Framework is prone to multiple NULL-byte injection vulnerabilities because it fails to adequately sanitize user-supplied data. An attacker can exploit...

Microsoft .NET Version Information Disclosure

By requesting a non-existent .aspx file on the remote web server, it is possible to obtain the exact version number of the remote .NET framework. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid24243; scriptversion"1.14";...