First published: Wed Jul 10 2013(Updated: )
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Delegate Reflection Bypass Vulnerability."
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft .NET Framework | =1.0-sp3 | |
Microsoft .NET Framework | =1.1-sp1 | |
Microsoft .NET Framework | =2.0-sp2 | |
Microsoft .NET Framework | =3.5 | |
Microsoft .NET Framework | =3.5.1 | |
Microsoft .NET Framework | =4.0 | |
Microsoft .NET Framework | =4.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2013-3132 is classified as critical due to its potential for remote code execution.
To address CVE-2013-3132, you should apply the appropriate Microsoft security updates provided in the bulletin MS13-052.
CVE-2013-3132 affects various versions of the Microsoft .NET Framework, including 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5.
The vulnerability can be exploited through crafted XAML browser applications (XBAPs) or malicious .NET Framework applications.
CVE-2013-3132 compromises application security by allowing attackers to execute arbitrary code due to improper permission checks in reflection.