CVE-2009-0090 — Microsoft NET Framework vulnerability

CWE-2643 documents3 sources
Severity
9.3CRITICALNVD
EPSS
42.1%
top 2.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft NET Framework
Timeline
PublishedOct 14
Latest updateMay 2

Description

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Pointer Verification Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDmicrosoft/net_framework4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-rjcc-fp5m-hj73: Microsoft↗2022-05-02
▶
CVEList
CVE-2009-0090: Microsoft↗2009-10-14
▶
CVE-2009-0090 — Microsoft NET Framework vulnerability | cvebase