CVE-2012-0160 in .NET Framework

Summary

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 12/13/2011
• Disclosure: 05/08/2012
• Moderation: VulDB entry created
• Entries: 1: VDB-5367
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 6.3
• EPSS: 0.54649
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-0160
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-0160
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-0160/