Microsoft .NET Framework Parameter Validation Vulnerability (CVE-2012-0163)
Publish Date: 21 luglio 2015
Gravità: : Critico
Identificatori CVE: CVE-2012-0163,MS12-025
Data notifica: 21 luglio 2015
Descrizione
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."
Informazioni esposizione:
Apply associated Trend Micro DPI Rules.
Soluzioni
Trend Micro Deep Security DPI Rule Number: 1004976
Trend Micro Deep Security DPI Rule Name: 1004976 - Microsoft .NET Framework Parameter Validation Vulnerability (CVE-2012-0163)
Software e versione interessati:
- microsoft .net_framework 1.0
- microsoft .net_framework 1.1
- microsoft .net_framework 2.0
- microsoft .net_framework 3.5
- microsoft .net_framework 3.5.1
- microsoft .net_framework 4.0
- microsoft .net_framework 4.5