CVE-2010-3958 — Improper Input Validation in Microsoft NET Framework

CWE-20 — Improper Input Validation3 documents3 sources
Severity
9.3CRITICALNVD
EPSS
56.5%
top 1.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft NET Framework
Timeline
PublishedApr 13
Latest updateMay 13

Description

The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Stack Corruption Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDmicrosoft/net_framework4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-5259-6jh5-xwhp: The x86 JIT compiler in Microsoft↗2022-05-13
▶
CVEList
CVE-2010-3958: The x86 JIT compiler in Microsoft↗2011-04-13
▶
CVE-2010-3958 — Improper Input Validation in Microsoft | cvebase