CVEvulnerability
CVE-2014-4121
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-10-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse internationalized resource identifiers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted request to a .NET web application, aka ".NET Framework Remote Code Execution Vulnerability."
Affected configurations
• microsoft .net framework 2.0
• microsoft .net framework 3.5
• microsoft .net framework 3.5.1
• microsoft .net framework 4.0
• microsoft .net framework 4.5
• microsoft .net framework 4.5.1
• microsoft .net framework 4.5.2
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/60969 secunia.com
- http://www.securityfocus.com/bid/70351 www.securityfocus.com
- http://www.securitytracker.com/id/1031021 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057 docs.microsoft.com
- http://secunia.com/advisories/60969 secunia.com
- http://www.securityfocus.com/bid/70351 www.securityfocus.com
- http://www.securitytracker.com/id/1031021 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057 docs.microsoft.com