CVE-2014-4149: Input Validation
First published: Tue Nov 11 2014(Updated: )
Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly perform TypeFilterLevel checks, which allows remote attackers to execute arbitrary code via crafted data to a .NET Remoting endpoint, aka "TypeFilterLevel Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft .NET Framework 4 | =1.1-sp1 | |
| Microsoft .NET Framework 4 | =2.0-sp2 | |
| Microsoft .NET Framework 4 | =3.5 | |
| Microsoft .NET Framework 4 | =3.5.1 | |
| Microsoft .NET Framework 4 | =4.0 | |
| Microsoft .NET Framework 4 | =4.5 | |
| Microsoft .NET Framework 4 | =4.5.1 | |
| Microsoft .NET Framework 4 | =4.5.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-4149?
CVE-2014-4149 has a critical severity rating due to the risk of arbitrary code execution.
How do I fix CVE-2014-4149?
To address CVE-2014-4149, ensure that all affected versions of the Microsoft .NET Framework are updated to the latest security patches provided by Microsoft.
What software is affected by CVE-2014-4149?
CVE-2014-4149 affects Microsoft .NET Framework versions 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2.
Can CVE-2014-4149 be exploited remotely?
Yes, CVE-2014-4149 can be exploited remotely via crafted data sent to a .NET Remoting endpoint.
What type of vulnerability is CVE-2014-4149?
CVE-2014-4149 is classified as a TypeFilterLevel vulnerability, allowing potential elevation of privilege through improper checks.
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/tags
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft .net framework 4
- version/microsoft .net framework 4/1.1-sp1
- version/microsoft .net framework 4/2.0-sp2
- version/microsoft .net framework 4/3.5
- version/microsoft .net framework 4/3.5.1
- version/microsoft .net framework 4/4.0
- version/microsoft .net framework 4/4.5
- version/microsoft .net framework 4/4.5.1
- version/microsoft .net framework 4/4.5.2