Lucene search
PRIOn knowledge basePRION:CVE-2013-3171HistoryJul 10, 2013 - 3:46 a.m.
Design/Logic Flaw
2013-07-1003:46:00
PRIOn knowledge base
www.prio-n.com
2
The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a partial-trust relationship, aka “Delegate Serialization Vulnerability.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| .net_framework | eq | 4.0 | |
| .net_framework | eq | 2.0 sp2 | |
| .net_framework | eq | 4.5 | |
| .net_framework | eq | 3.5 sp1 | |
| .net_framework | eq | 3.5 | |
| .net_framework | eq | 3.5.1 |
Related
cvelist
cvelist
CVE-2013-3171
2013-07-10 01:00:00
cve
cve
CVE-2013-3171
2013-07-10 03:46:10
symantec
symantec
nvd
nvd
CVE-2013-3171
2013-07-10 03:46:10
openvas
openvas
Microsoft .NET Framework Multiple Vulnerabilities (2861561)
2013-07-10 00:00:00
Microsoft .NET Framework Multiple Vulnerabilities (2861561)
2013-07-10 00:00:00
nessus
nessus
mskb
mskb
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2013-07-29 00:00:00