CVE-2011-1978 in .NET Framework

Summary

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Socket Restriction Bypass Vulnerability."

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 05/09/2011
• Disclosure: 08/10/2011
• Moderation: VulDB entry created
• Entries: 1: VDB-4391
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 6.5
• EPSS: 0.14256
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-1978
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-1978
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-1978/