Lucene search
K

107 matches found

CNVD
CNVD
added 2016/02/11 12:0 a.m.2 views

Microsoft .NET Framework WinForms Information Disclosure Vulnerability

WinForms a.k.a. Microsoft Windows Forms is a smart client component of the .NET Development Framework from the United States Microsoft Microsoft and part of the graphical user interface of the . It provides access to Windows native native components by encapsulating existing Windows APIs Win32 AP...

7.5CVSS6.1AI score0.17158EPSS
Exploits0References1
Prion
Prion
added 2016/02/10 11:59 a.m.21 views

Information disclosure

WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."...

5CVSS6.4AI score0.17158EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2016/02/10 11:0 a.m.23 views

CVE-2016-0047

WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data, aka "Windows Forms Information Disclosure Vulnerability."...

7.1AI score0.17158EPSS
Exploits0References2
CVE
CVE
added 2016/02/10 11:0 a.m.72 views

CVE-2016-0047

CVE-2016-0047 is a Windows Forms information-disclosure vulnerability in the Microsoft .NET Framework, enabling remote attackers to obtain sensitive data from process memory via specially crafted icon data. Affected are WinForms components in .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4....

7.5CVSS7AI score0.17158EPSS
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2016/02/10 12:0 a.m.273 views

Microsoft .NET Framework Denial of Service Vulnerabilities (3137893)

This host is missing an important security update according to Microsoft Bulletin MS16-019. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.5CVSS7.1AI score0.19296EPSS
Exploits0References2
CNVD
CNVD
added 2015/05/14 12:0 a.m.0 views

Microsoft .NET WinForms Memory Corruption Arbitrary Code Execution Vulnerability

Microsoft .NET Framework is a system distributed by Microsoft to help developers build WEB-based applications. A security vulnerability in Microsoft .NET Framework WinForms exists due to a failure of the program to properly handle objects in memory, which allows remote attackers to exploit the...

9.3CVSS7.3AI score0.39189EPSS
Exploits0References1
NVD
NVD
added 2015/05/13 10:59 a.m.22 views

CVE-2015-1673

The Windows Forms aka WinForms libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-assisted remote attackers to execute arbitrary code via a crafted partial-trust application, aka "Windows Forms Elevation of Privilege Vulnerability."...

9.3CVSS7.5AI score0.39189EPSS
Exploits0References3
CVE
CVE
added 2015/05/13 10:0 a.m.98 views

CVE-2015-1673

CVE-2015-1673 affects the Windows Forms (WinForms) libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2. It is described as a memory-handling vulnerability in WinForms that, when a crafted partial-trust application is used, allows a user-assisted remote att...

9.3CVSS7.6AI score0.39189EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/05/12 12:0 a.m.436 views

MS15-048: Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (3057134)

The remote Windows host is running a version of the Microsoft .NET Framework that is affected by multiple vulnerabilities : - A denial of service vulnerability exists in the Microsoft .NET Framework due to a recursion flaw that occurs when decrypting XML data. A remote attacker can exploit this,...

9.3CVSS5.6AI score0.39189EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.2 views

Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the mono-winforms package of the SUSE Linux Enterprise operating system can lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

7.5CVSS5.4AI score0.06299EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.2 views

The vulnerability of the OpenSUSE operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the mono-winforms package in the OpenSUSE operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited remotely...

5CVSS5.4AI score0.15016EPSS
Exploits1References2Affected Software1
Check Point Advisories
Check Point Advisories
added 2013/02/27 12:0 a.m.3 views

Microsoft .NET Framework WinForms Information Disclosure (CVE-2013-0001)

A remote code execution vulnerability has been reported in the Microsoft .NET Framework. The vulnerability is due to the way WinForms handles pointers to unmanaged memory locations.A remote, unauthenticated attacker can exploit this vulnerability by either enticing a user to visit a maliciously...

4.3CVSS7.9AI score0.14981EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2013/02/13 12:4 p.m.3 views

CVE-2013-0073

The Windows Forms aka WinForms component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 ...

10CVSS6.1AI score0.5582EPSS
Exploits0References4
CVE
CVE
added 2013/02/13 11:0 a.m.83 views

CVE-2013-0073

CVE-2013-0073 affects the Windows Forms component of Microsoft .NET Framework (versions 2.0 SP2, 3.5, 3.5.1, 4, 4.5). The root cause is improper restriction of privileges for a callback function during object creation, which can allow remote attackers to execute arbitrary code via a crafted XBAP ...

10CVSS7.6AI score0.5582EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2013/02/13 11:0 a.m.25 views

CVE-2013-0073

The Windows Forms aka WinForms component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 ...

7.4AI score0.5582EPSS
Exploits0References3
seebug.org
seebug.org
added 2013/01/10 12:0 a.m.27 views

Microsoft .NET Framework 远程权限提升漏洞(CVE-2013-0002)

Bugtraq ID:57126 CVE ID: CVE-2013-0002 Microsoft .NET Framework是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统。 Microsoft .NET WinForms方法没有正确校验内存中的对象数量,在拷贝这些对象到数组之前缺少正确的边界检查,可触发缓冲区溢出。攻击者可以构建特制的XMAL浏览器应用XBAP或不可信的.Net应用,诱使用户解析,可完全控制应用系统,执行任意代码。 0 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0...

9.3CVSS6.4AI score0.61214EPSS
Exploits1
Prion
Prion
added 2013/01/09 6:9 p.m.17 views

Buffer overflow

Buffer overflow in the Windows Forms aka WinForms component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via 1 a crafted XAML browser application XBAP or 2 a crafted .NET Framework application that leverag...

9.3CVSS8.3AI score0.61214EPSS
Exploits1References4Affected Software1
CVE
CVE
added 2013/01/09 6:0 p.m.112 views

CVE-2013-0001

CVE-2013-0001 concerns a vulnerability in the Windows Forms (WinForms) component of Microsoft .NET Framework (1.0 SP3–4.5). The root cause is improper initialization of memory arrays and use of a pointer to unmanaged memory, enabling information disclosure. Exploitation could occur via a crafted ...

4.3CVSS5.8AI score0.14981EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2013/01/09 6:0 p.m.184 views

CVE-2013-0002

Microsoft .NET Framework WinForms Buffer Overflow (CVE-2013-0002) is triggered by improper counting of objects during a memory copy in Windows Forms, allowing remote code execution via a crafted XBAP or a crafted .NET application. Affected versions span 1.0 SP3 through 4.5. The root cause is a ra...

9.3CVSS7.8AI score0.61214EPSS
Exploits1References4Affected Software1
OpenVAS
OpenVAS
added 2013/01/09 12:0 a.m.30 views

Microsoft .NET Framework Privilege Elevation Vulnerability (2769324)

This host is missing an important security update according to Microsoft Bulletin MS13-004. OpenVAS Vulnerability Test $Id: secpodms13-004.nasl 5365 2017-02-20 13:46:09Z cfi $ Microsoft .NET Framework Privilege Elevation Vulnerability 2769324 Authors: Antu Sanadi Copyright: Copyright c 2013 SecPo...

9.3CVSS0.9AI score0.61322EPSS
Exploits5References16
Rows per page
Query Builder