QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2012-0161

Back to search

CVE-2012-0161

Published: May 9, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

oval:org.mitre.oval:def:14951
vdb-entry
signature
x_refsource_OVAL
53357
vdb-entry
x_refsource_BID
1027036
vdb-entry
x_refsource_SECTRACK
MS12-035
vendor-advisory
x_refsource_MS
TA12-129A
third-party-advisory
x_refsource_CERT
49117
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now