CVE-2012-1895: Critical severity microsoft .net framework 4 vulnerability
The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Reflection Bypass Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1895?
CVE-2012-1895 has a high severity rating, indicating a significant risk of remote code execution.
How do I fix CVE-2012-1895?
To fix CVE-2012-1895, update the Microsoft .NET Framework to the latest version available.
Which software is affected by CVE-2012-1895?
CVE-2012-1895 affects Microsoft .NET Framework versions 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4.
What kind of attacks can exploit CVE-2012-1895?
CVE-2012-1895 can be exploited through crafted XAML browser applications or .NET Framework applications.
Is there a workaround for CVE-2012-1895?
While the best approach is to update to a secured version, a temporary workaround may involve restricting the execution of untrusted code.