CVE-2011-0664

EPSS 16.01%
Veröffentlicht 16.06.2011 20:55:01
Zuletzt bearbeitet 16.06.2026 23:27:50
Erkennungen
Login

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Array Offset Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 7 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ .Net Framework Version 4.0

   Microsoft ≫ Windows 2003 Server Update sp2
   Microsoft ≫ Windows 7 Version -
   Microsoft ≫ Windows 7 Version - Update sp1 Edition x86
   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Server 2008 Edition itanium
   Microsoft ≫ Windows Server 2008 Edition x32
   Microsoft ≫ Windows Server 2008 Edition x64
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x32
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x64
   Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition itanium
   Microsoft ≫ Windows Server 2008 Version r2 Edition itanium
   Microsoft ≫ Windows Server 2008 Version r2 Edition x64
   Microsoft ≫ Windows Vista Update sp1
   Microsoft ≫ Windows Vista Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ .Net Framework Version 3.5.1

   Microsoft ≫ Windows 7 Version -
   Microsoft ≫ Windows Server 2008 Version r2 Edition itanium
   Microsoft ≫ Windows Server 2008 Version r2 Edition x64

Microsoft ≫ .Net Framework Version 2.0 Update sp2

   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Server 2008 Edition itanium
   Microsoft ≫ Windows Server 2008 Edition x32
   Microsoft ≫ Windows Server 2008 Edition x64
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x32
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x64
   Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition itanium
   Microsoft ≫ Windows Vista Update sp1
   Microsoft ≫ Windows Vista Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ .Net Framework Version 3.5 Update sp1

   Microsoft ≫ Windows 2003 Server Update sp2
   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Server 2008 Edition itanium
   Microsoft ≫ Windows Server 2008 Edition x32
   Microsoft ≫ Windows Server 2008 Edition x64
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x32
   Microsoft ≫ Windows Server 2008 Update sp2 Edition x64
   Microsoft ≫ Windows Server 2008 Version - Update sp2 Edition itanium
   Microsoft ≫ Windows Vista Update sp1
   Microsoft ≫ Windows Vista Update sp2
   Microsoft ≫ Windows Xp Update sp3
   Microsoft ≫ Windows Xp Version - Update sp2 Edition x64

Microsoft ≫ .Net Framework Version 2.0 Update sp1

   Microsoft ≫ Windows Server 2008 Edition itanium
   Microsoft ≫ Windows Server 2008 Edition x32
   Microsoft ≫ Windows Server 2008 Edition x64
   Microsoft ≫ Windows Vista Update sp1

Microsoft ≫ .Net Framework Version 3.5

Microsoft ≫ Silverlight Version 4.0.60310.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	16.01%	0.965

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-039

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12105

https://nvd.nist.gov/vuln/detail/CVE-2011-0664

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-0664

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-0664

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2011-0664