7.8

CVE-2013-0005

The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ .Net Framework Version3.5
   Microsoft ≫ Windows 8 Version- Update- Editionx64
   Microsoft ≫ Windows 8 Version- Update- Editionx86
   Microsoft ≫ Windows Server 2012 Version-
Microsoft ≫ .Net Framework Version3.5 Updatesp1
   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionitanium
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionx64
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionx86
   Microsoft ≫ Windows Vista Updatesp2
   Microsoft ≫ Windows Vista Version- Updatesp2
   Microsoft ≫ Windows Xp Updatesp3
   Microsoft ≫ Windows Xp Versionsp2 Updateprofessional Editionx64
Microsoft ≫ .Net Framework Version3.5.1
   Microsoft ≫ Windows 7 Updatesp1 Editionx64
   Microsoft ≫ Windows 7 Updatesp1 Editionx86
   Microsoft ≫ Windows 7 Version-
   Microsoft ≫ Windows Server 2008 Versionr2 Update- Editionitanium
   Microsoft ≫ Windows Server 2008 Versionr2 Update- Editionx64
Microsoft ≫ .Net Framework Version4.0
   Microsoft ≫ Windows 7 Updatesp1 Editionx64
   Microsoft ≫ Windows 7 Updatesp1 Editionx86
   Microsoft ≫ Windows 7 Version-
   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionx64
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionx86
   Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editionitanium
   Microsoft ≫ Windows Server 2008 Versionr2 Update- Editionitanium
   Microsoft ≫ Windows Server 2008 Versionr2 Update- Editionx64
   Microsoft ≫ Windows Server 2008 Versionr2 Updatesp1
   Microsoft ≫ Windows Vista Updatesp2
   Microsoft ≫ Windows Xp Version- Updatesp3
   Microsoft ≫ Windows Xp Versionsp2 Updateprofessional Editionx64
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 68.16% 0.986
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.