CVE-2012-1855 in .NET Framework

Summary

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly handle function pointers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Memory Access Vulnerability."

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 03/22/2012
• Disclosure: 06/12/2012
• Moderation: VulDB entry created
• Entries: VDB-5518 (1)
• CPE: ready
• CWE: CWE-94 (Confirmed)
• CVSS: 10.0
• EPSS: 0.50262
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-1855
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-1855
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-1855/