CVE-2012-0014

high · 7.8

Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4, and Silverlight 4 before 4.1.10111, does not properly restrict access to memory associated with unmanaged objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Unmanaged Objects Vulnerability."

7.8

CVSS

28.2%

EPSS (exploit prob.)

98th

EPSS percentile

2012-02-14

Published

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-94

Affected products

Vendor	Product	Affected versions
microsoft	.net_framework	2.0
microsoft	.net_framework	3.5.1
microsoft	.net_framework	4.0
microsoft	windows_7	all versions
microsoft	windows_7	all versions
microsoft	windows_7	all versions
microsoft	windows_7	all versions
microsoft	windows_server_2003	all versions
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	all versions
microsoft	windows_server_2008	r2
microsoft	windows_server_2008	r2
microsoft	windows_vista	all versions
microsoft	windows_xp	all versions
microsoft	silverlight	4.0.50524.00
microsoft	silverlight	4.0.50826.0
microsoft	silverlight	4.0.50917.0
microsoft	silverlight	4.0.51204.0
microsoft	silverlight	4.0.60129.0
microsoft	silverlight	4.0.60310.0
microsoft	silverlight	4.0.60531.0
microsoft	silverlight	4.0.60831.0
microsoft	silverlight	4.0.603310.0
microsoft	silverlight	4.1.10111
apple	mac_os_x	all versions
microsoft	windows	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-0014