PT-2012-2363 · Microsoft · Windows Presentation Foundation+1

Published 2012-05-08 · Updated 2018-10-12 · CVE-2012-0164

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework version 4

Description A denial of service issue exists due to improper comparison of index values in .NET Framework, allowing remote attackers to cause applications created using Windows Presentation Foundation (WPF) APIs to stop responding until manually restarted. This issue does not allow an attacker to execute code or elevate their user rights.

Recommendations For Microsoft .NET Framework version 4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2012-0164

Affected Products

.Net Framework

Windows Presentation Foundation

References · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0164 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-0164 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-034 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15580 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0164 · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms12-034 · Note
• http://securityfocus.com/bid/53363 · Note