|
|
| |
Credit:
The information has been provided by James Forshaw.
The original article can be found at: http://www.securityfocus.com/bid/53357
|
| |
Vulnerable Systems:
* Microsoft .NET Framework 3.5.1
* Microsoft .NET Framework 4.0
* Microsoft .NET Framework 3.0 SP2
* Microsoft .NET Framework 2.0 SP2
* Microsoft .NET Framework 2.0 SP1
* Microsoft .NET Framework 1.1 SP1
* Microsoft .NET Framework 1.0 SP3
* Microsoft .NET Framework 1.0 SP2
* Microsoft .NET Framework 1.0 SP1
An attacker can exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts will likely result in a denial-of-service condition.
Vendor Status:
Microsoft had issued an update for this vulnerability
Patch Availability:
http://technet.microsoft.com/en-us/security/bulletin/MS12-035
CVE Information:
CVE-2012-0161
Disclosure Timeline:
Initial Release :May 08 2012
|
|
|