CVEvulnerability
CVE-2013-1336
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-05-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed XML documents via unspecified vectors that preserve signature validity, aka "XML Digital Signature Spoofing Vulnerability."
Affected configurations
• microsoft .net framework 2.0
• microsoft .net framework 3.5
• microsoft .net framework 3.5.1
• microsoft .net framework 4.0
• microsoft .net framework 4.5
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.us-cert.gov/ncas/alerts/TA13-134A US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-040 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16559 oval.cisecurity.org
- http://www.us-cert.gov/ncas/alerts/TA13-134A US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-040 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16559 oval.cisecurity.org