Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Array Offset Vulnerability."
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
|
Information
Published : 2011-06-16 13:55
Updated : 2020-09-28 05:58
NVD link : CVE-2011-0664
Mitre link : CVE-2011-0664
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
microsoft
- windows_7
- windows_2003_server
- silverlight
- windows_vista
- windows_xp
- windows_server_2008
- .net_framework
- windows_server_2003