PT-2014-1668 · Microsoft · .Net Framework
CVE-2014-0257
·
Publicado
2014-02-11
·
Atualizado
2025-03-27
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft .NET Framework versions 1.0 SP3 through 4.5.1
Description
The issue allows an attacker to elevate privileges on the targeted system. It exists due to improper determination of whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via a crafted web site or a crafted .NET Framework application that exposes a COM server endpoint.
Recommendations
For Microsoft .NET Framework versions 1.0 SP3 through 4.5.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
.Net Framework