PT-2011-2541 · Microsoft · Silverlight+1

CVE-2011-0664 · Publicado 2011-06-16 · Atualizado 2023-12-07

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 2.0 SP1 through 4.0 Silverlight versions prior to 4.0.60531.0

Description The issue allows remote attackers to execute arbitrary code via crafted applications, including XAML browser applications, ASP.NET applications, .NET Framework applications, or Silverlight applications. This is due to improper validation of arguments to unspecified networking API functions. An attacker who successfully exploits this issue could run arbitrary code in the security context of the logged-on user, potentially installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights.

Recommendations For Microsoft .NET Framework versions 2.0 SP1 through 4.0, update to a version that properly validates arguments to networking API functions. For Silverlight versions prior to 4.0.60531.0, update to version 4.0.60531.0 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-0664

Produtos afetados

.Net Framework

Silverlight

Referências · 6

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0664 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12105 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-039 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0664 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0664 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-039 · Nota