PT-2014-1102 · Microsoft · .Net Framework

James Forshaw · Published 1999-01-01 · Updated 2018-10-12 · CVE-2014-1806

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 1.1 SP1 through 4.5.1

Description The issue is related to the .NET Remoting implementation, which does not properly restrict memory access. This allows remote attackers to execute arbitrary code via vectors involving malformed objects. An elevation of privilege vulnerability exists in the way that .NET Framework handles TypeFilterLevel checks for some malformed objects, allowing attackers to elevate existing privileges.

Recommendations For Microsoft .NET Framework versions 1.1 SP1 through 4.5.1, consider restricting access to .NET Remoting until a patch is available. As a temporary workaround, consider disabling the TypeFilterLevel checks for malformed objects until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2014-00184

CVE-2014-1806

DOTNETREMOTINGCHECK

Affected Products

.Net Framework

References · 29

• 🔥 https://exploit-db.com/exploits/35280 · Exploit
• 🔥 https://github.com/tyranid/ExploitRemotingService · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-27816 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53915 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-27460 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-28072 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-35971 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34489 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-44678 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-32499 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34394 · Security Note
• https://bdu.fstec.ru/vul/2014-00184 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58384 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34414 · Security Note