CVE-2013-0002: Buffer Overflow
Buffer overflow in the Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages improper counting of objects during a memory copy operation, aka "WinForms Buffer Overflow Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0002?
CVE-2013-0002 has a critical severity rating due to its potential for remote code execution.
How do I fix CVE-2013-0002?
To fix CVE-2013-0002, apply the relevant Microsoft security updates outlined in the MS13-004 security bulletin.
Which versions of Microsoft .NET Framework are affected by CVE-2013-0002?
CVE-2013-0002 affects Microsoft .NET Framework versions 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5.
Can CVE-2013-0002 lead to system compromise?
Yes, CVE-2013-0002 can allow remote attackers to execute arbitrary code, possibly leading to system compromise.
What types of applications can exploit CVE-2013-0002?
CVE-2013-0002 can be exploited through crafted XAML browser applications (XBAP) or malicious .NET Framework applications.