CVE-2013-3861: Input Validation

Published Oct 9, 2013

Updated

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service (application crash or hang) via crafted character sequences in JSON data, aka "JSON Parsing Vulnerability."

Affected Software

6 affected components

Microsoft .NET Framework=2.0-sp2

Microsoft .NET Framework=3.5

Microsoft .NET Framework=3.5-sp1

Microsoft .NET Framework=3.5.1

Microsoft .NET Framework=4.0

Microsoft .NET Framework=4.5

Event History

Oct 9, 2013

CVE Published

via MITRE·02:44 PM

Data Sourced

via MITRE·02:44 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3861?

CVE-2013-3861 has a severity rating that indicates it can lead to denial of service due to application crashes or hangs.

How do I fix CVE-2013-3861?

To address CVE-2013-3861, it is recommended to apply the security updates provided by Microsoft for the affected .NET Framework versions.

What versions of .NET Framework are affected by CVE-2013-3861?

CVE-2013-3861 affects .NET Framework versions 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4.0, and 4.5.

What type of attack does CVE-2013-3861 enable?

CVE-2013-3861 enables remote attackers to cause a denial of service through crafted character sequences in JSON data.

Is there any workaround for CVE-2013-3861?

There are no known workarounds for CVE-2013-3861; applying the relevant security updates is the advised course of action.