CVE-2012-0015: Code Injection
Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0015?
CVE-2012-0015 has a severity rating of critical due to its ability to allow remote code execution.
How do I fix CVE-2012-0015?
To fix CVE-2012-0015, you should apply the Microsoft security update provided in their bulletin MS12-016.
What versions of .NET Framework are affected by CVE-2012-0015?
CVE-2012-0015 affects Microsoft .NET Framework 2.0 SP2 and 3.5.1.
Can CVE-2012-0015 be exploited remotely?
Yes, CVE-2012-0015 can be exploited remotely through crafted XAML browser applications or ASP.NET applications.
What are the potential impacts of CVE-2012-0015?
The potential impacts of CVE-2012-0015 include executing arbitrary code on the affected systems.