CVE-2012-0015

EPSS 56.28%
Veröffentlicht 14.02.2012 22:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ .Net Framework Version2.0 Updatesp2

   Microsoft ≫ Windows 7 Editionx64
   Microsoft ≫ Windows 7 Editionx86
   Microsoft ≫ Windows 7 Updatesp1 Editionx64
   Microsoft ≫ Windows 7 Updatesp1 Editionx86
   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionx64
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionx86
   Microsoft ≫ Windows Server 2008 Versionr2 Editionitanium
   Microsoft ≫ Windows Server 2008 Versionr2 Editionx64
   Microsoft ≫ Windows Vista Updatesp2
   Microsoft ≫ Windows Xp Updatesp3

Microsoft ≫ .Net Framework Version3.5.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	56.28%	0.981

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://www.us-cert.gov/cas/techalerts/TA12-045A.html

Third Party Advisory

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-016

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14513

https://nvd.nist.gov/vuln/detail/CVE-2012-0015

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0015

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0015

EUVD