CVE-2012-4777

published 2012-11-14

CVE-2012-4777: The code-optimization feature in the reflection implementation in Microsoft .NET Framework 4 and 4.5 does not properly enforce object permissions, which allows…

critical 9.3 CVSS 3.1

AV N AC M Au N C C I C A C

The code-optimization feature in the reflection implementation in Microsoft .NET Framework 4 and 4.5 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "WPF Reflection Optimization Vulnerability."

Affected

2 ranges

Vendor	Product	Version range	Fixed in
microsoft	net_framework	—	—
microsoft	net_framework	—	—

CWE-264