CVE-2013-3134: Code Injection

Published Jul 10, 2013

Updated

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 on 64-bit platforms does not properly allocate arrays of structures, which allows remote attackers to execute arbitrary code via a crafted .NET Framework application that changes array data, aka "Array Allocation Vulnerability."

Affected Software

5 affected components

Microsoft .NET Framework=2.0-sp2

Microsoft .NET Framework=3.5

Microsoft .NET Framework=3.5.1

Microsoft .NET Framework=4.0

Microsoft .NET Framework=4.5

Event History

Jul 10, 2013

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3134?

CVE-2013-3134 has a critical severity rating due to its potential to allow remote code execution.

How do I fix CVE-2013-3134?

To fix CVE-2013-3134, update your Microsoft .NET Framework to the latest available version.

What versions of .NET Framework are affected by CVE-2013-3134?

CVE-2013-3134 affects .NET Framework versions 2.0 SP2, 3.5, 3.5.1, 4.0, and 4.5 on 64-bit platforms.

Can CVE-2013-3134 be exploited remotely?

Yes, CVE-2013-3134 can be exploited remotely through a crafted .NET Framework application.

What impact does CVE-2013-3134 have on system security?

CVE-2013-3134 can lead to arbitrary code execution, potentially compromising the security of affected systems.