PT-2013-2054 · Microsoft · .Net Framework

Vitaliy Toropov · Published 2013-01-09 · Updated 2023-12-07 · CVE-2013-0003

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 2.0 SP2 through 4.5

Description A buffer overflow issue exists in the System.DirectoryServices.Protocols namespace method, allowing remote attackers to execute arbitrary code via a crafted XAML browser application or a crafted .NET Framework application. This occurs due to a missing array-size check during a memory copy operation. The vulnerability can be exploited to gain elevation of privilege, enabling an attacker to take complete control of an affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations For Microsoft .NET Framework versions 2.0 SP2 through 4.5, consider disabling the vulnerable System.DirectoryServices.Protocols namespace method until a patch is available. Restrict access to the affected .NET Framework applications to minimize the risk of exploitation. Avoid using crafted XAML browser applications or .NET Framework applications that leverage the missing array-size check during a memory copy operation until the issue is resolved.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-0003

ZDI-13-004

Affected Products

.Net Framework

References · 8

• https://zerodayinitiative.com/advisories/ZDI-13-004 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0003 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0003 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16381 · Note
• http://us-cert.gov/cas/techalerts/TA13-008A.html · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms13-004 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0003 · Note