CVE-2012-0164 — Microsoft NET Framework vulnerability

3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
14.9%
top 5.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft NET Framework
Timeline
PublishedMay 9
Latest updateMay 4

Description

Microsoft .NET Framework 4 does not properly compare index values, which allows remote attackers to cause a denial of service (application hang) via crafted requests to a Windows Presentation Foundation (WPF) application, aka ".NET Framework Index Comparison Vulnerability."

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-m483-w5fx-c7h4: Microsoft↗2022-05-04
▶
CVEList
CVE-2012-0164: Microsoft↗2012-05-09
▶
CVE-2012-0164 — Microsoft NET Framework vulnerability | cvebase