CVE-2013-3134 — Code Injection in Microsoft NET Framework

CWE-94 — Code Injection6 documents4 sources
Severity
9.3CRITICALNVD
EPSS
57.7%
top 1.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft NET Framework
Timeline
PublishedJul 10
Latest updateMay 14

Description

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 on 64-bit platforms does not properly allocate arrays of structures, which allows remote attackers to execute arbitrary code via a crafted .NET Framework application that changes array data, aka "Array Allocation Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDmicrosoft/net_framework5 versions+4

🔴Vulnerability Details

5
GHSA
GHSA-ghfm-2jj8-hppg: The Common Language Runtime (CLR) in Microsoft↗2022-05-14
▶
OSV
linux-lts-vivid vulnerabilities↗2016-03-14
▶
OSV
linux-lts-utopic vulnerabilities↗2016-03-14
▶
OSV
linux vulnerabilities↗2016-03-14
▶
CVEList
CVE-2013-3134: The Common Language Runtime (CLR) in Microsoft↗2013-07-10
▶
CVE-2013-3134 — Code Injection in Microsoft | cvebase