CVEvulnerability

CVE-2012-2519

7.9 HIGH Published 2012-11-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-11-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.9 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET application, aka ".NET Framework Insecure Library Loading Vulnerability."

Affected configurations

• microsoft .net framework 1.0 • microsoft .net framework 1.1 • microsoft .net framework 2.0 • microsoft .net framework 3.5.1 • microsoft .net framework 4.0 • microsoft .net framework 3.5

References