CVEvulnerability
CVE-2012-0163
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-04-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."
Affected configurations
• microsoft .net framework 1.0
• microsoft .net framework 1.1
• microsoft .net framework 2.0
• microsoft .net framework 3.5
• microsoft .net framework 3.5.1
• microsoft .net framework 4.0
• microsoft .net framework 4.5
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securitytracker.com/id?1026907 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA12-101A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-025 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74377 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15495 oval.cisecurity.org
- http://www.securitytracker.com/id?1026907 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA12-101A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-025 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74377 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15495 oval.cisecurity.org