PT-2012-2363 · Microsoft · Windows Presentation Foundation+1

Publicado 2012-05-08 · Atualizado 2018-10-12 · CVE-2012-0164

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework version 4

Description A denial of service issue exists due to improper comparison of index values in .NET Framework, allowing remote attackers to cause applications created using Windows Presentation Foundation (WPF) APIs to stop responding until manually restarted. This issue does not allow an attacker to execute code or elevate their user rights.

Recommendations For Microsoft .NET Framework version 4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2012-0164

Produtos afetados

.Net Framework

Windows Presentation Foundation

Referências · 7

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15580 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0164 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0164 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0164 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 · Aviso do Fabricante
• http://technet.microsoft.com/en-us/security/bulletin/ms12-034 · Nota
• http://securityfocus.com/bid/53363 · Nota