CVE-2012-0161: Input Validation
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly handle an unspecified exception during use of partially trusted assemblies to serialize input data, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Serialization Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0161?
CVE-2012-0161 is considered a critical vulnerability as it can lead to remote code execution.
How do I fix CVE-2012-0161?
To mitigate CVE-2012-0161, it is recommended to update to a supported version of the Microsoft .NET Framework.
What versions of the .NET Framework are affected by CVE-2012-0161?
CVE-2012-0161 affects Microsoft .NET Framework versions 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4.0.
Can CVE-2012-0161 be exploited remotely?
Yes, CVE-2012-0161 can be exploited by remote attackers to execute arbitrary code.
What type of attack does CVE-2012-0161 involve?
CVE-2012-0161 involves attacks that utilize crafted XAML browser applications to exploit the vulnerability.