CVE-2009-2497

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 2.0 through 3.5 SP1 Silverlight version 2

Description The issue allows remote attackers to execute arbitrary code via a crafted application. A remote code execution vulnerability exists in the Microsoft .NET Framework that can allow a malicious application to modify memory, leading to arbitrary unmanaged code execution.

Recommendations For Microsoft .NET Framework versions 2.0 through 3.5 SP1, update to a version that includes the fix for this issue. For Silverlight version 2, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the execution of crafted XAML browser applications, Silverlight applications, ASP.NET applications, and .NET Framework applications until a patch is available.