CVE-2011-0664

CWE-20 — Improper Input Validation3 documents3 sources
Severity
9.3CRITICAL
EPSS
11.2%
top 6.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft .net FrameworkMicrosoft Silverlight
Timeline
PublishedJun 16
Latest updateMay 13

Description

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Array Offset Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDmicrosoft/.net_framework4 versions+3
▶NVDmicrosoft/silverlight4.0.60310.0

🔴Vulnerability Details

2
GHSA
GHSA-9qv9-388v-rqg7: Microsoft↗2022-05-13
▶
CVEList
CVE-2011-0664: Microsoft↗2011-06-16
▶
CVE-2011-0664 (CRITICAL CVSS 9.3) | Microsoft .NET Framework 2.0 SP1 an | cvebase.io