CVE-2013-3133: Code Injection
First published: Wed Jul 10 2013(Updated: )
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Anonymous Method Injection Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft .NET Framework | =2.0-sp2 | |
| Microsoft .NET Framework | =3.5 | |
| Microsoft .NET Framework | =3.5.1 | |
| Microsoft .NET Framework | =4.0 | |
| Microsoft .NET Framework | =4.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/weakness
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- vendor/microsoft
- canonical/microsoft .net framework
- version/microsoft .net framework/2.0-sp2
- version/microsoft .net framework/3.5
- version/microsoft .net framework/3.5.1
- version/microsoft .net framework/4.0
- version/microsoft .net framework/4.5