Microsoft .NET Framework Parameter Validation Vulnerability (CVE-2012-0163)
Publish date: 21 de julio de 2015
Gravedad: Crítico
Identificadores de CVE : CVE-2012-0163,MS12-025
Fecha recomendada: 21 de julio de 2015
Descripción
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."
Revelación de la información
Apply associated Trend Micro DPI Rules.
Soluciones
Trend Micro Deep Security DPI Rule Number: 1004976
Trend Micro Deep Security DPI Rule Name: 1004976 - Microsoft .NET Framework Parameter Validation Vulnerability (CVE-2012-0163)
Software y versión afectados
- microsoft .net_framework 1.0
- microsoft .net_framework 1.1
- microsoft .net_framework 2.0
- microsoft .net_framework 3.5
- microsoft .net_framework 3.5.1
- microsoft .net_framework 4.0
- microsoft .net_framework 4.5