Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET application, aka ".NET Framework Insecure Library Loading Vulnerability."
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Information
Published : 2012-11-13 16:55
Updated : 2020-09-28 05:58
NVD link : CVE-2012-2519
Mitre link : CVE-2012-2519
JSON object : View
CWE
Products Affected
microsoft
- windows_7
- windows_vista
- windows_xp
- windows_server_2008
- windows_8
- .net_framework
- windows_server_2012
- windows_server_2003