CVE-2014-4149

EPSS 21.44%
Veröffentlicht 11.11.2014 22:55:04
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly perform TypeFilterLevel checks, which allows remote attackers to execute arbitrary code via crafted data to a .NET Remoting endpoint, aka "TypeFilterLevel Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 8 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ .Net Framework Version 1.1 Update sp1

Microsoft ≫ .Net Framework Version 2.0 Update sp2

Microsoft ≫ .Net Framework Version 3.5

Microsoft ≫ .Net Framework Version 3.5.1

Microsoft ≫ .Net Framework Version 4.0

Microsoft ≫ .Net Framework Version 4.5

Microsoft ≫ .Net Framework Version 4.5.1

Microsoft ≫ .Net Framework Version 4.5.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	21.44%	0.973

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://blogs.technet.com/b/srd/archive/2014/11/11/ms14-072-net-remoting-elevation-of-privilege-vulnerability.aspx

Vendor Advisory

http://www.securitytracker.com/id/1031188

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-072

https://nvd.nist.gov/vuln/detail/CVE-2014-4149

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-4149

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-4149

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2014-4149