CVE-2011-1271: Null Pointer Dereference
The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent attackers to bypass intended access restrictions, and consequently execute arbitrary code, in opportunistic circumstances by leveraging a crafted application, as demonstrated by (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework JIT Optimization Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1271?
CVE-2011-1271 has a critical severity rating, as it allows attackers to execute arbitrary code under certain conditions.
How do I fix CVE-2011-1271?
To mitigate the risk of CVE-2011-1271, users should update to the latest version of Microsoft .NET Framework or apply relevant security patches.
Which versions of .NET Framework are affected by CVE-2011-1271?
CVE-2011-1271 affects Microsoft .NET Framework versions 3.5 Gold, SP1, 3.5.1, and 4.0.
Are older versions of Windows vulnerable to CVE-2011-1271?
Yes, older versions of Windows that run affected .NET Framework versions may be vulnerable to CVE-2011-1271.
What impact can CVE-2011-1271 have on my system?
CVE-2011-1271 can potentially allow attackers to bypass access restrictions and execute harmful code, compromising system integrity.