CVE-2013-0003: Buffer Overflow
Buffer overflow in a System.DirectoryServices.Protocols (S.DS.P) namespace method in Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a missing array-size check during a memory copy operation, aka "S.DS.P Buffer Overflow Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0003?
The severity of CVE-2013-0003 is classified as critical due to its potential to allow remote code execution.
How do I fix CVE-2013-0003?
To fix CVE-2013-0003, apply the relevant Microsoft security updates or patches provided for the affected .NET Framework versions.
Which versions of .NET Framework are affected by CVE-2013-0003?
CVE-2013-0003 affects .NET Framework versions 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5.
Can CVE-2013-0003 be exploited remotely?
Yes, CVE-2013-0003 can be exploited remotely through crafted applications like XAML browser applications.
What types of attacks can CVE-2013-0003 facilitate?
CVE-2013-0003 can facilitate attacks that lead to arbitrary code execution on the affected systems.