CVE-2009-0091

 

Published at: - 14-10-2009 12:30

Last modified: - 14-11-2022 06:02

Total changes: - 2

Description

Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Type Verification Vulnerability."

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:C/I:C/A:C

 

Verification logic

 

Reference

• TA09-286A-US Government Resource
• oval:org.mitre.oval:def:6451-
• MS09-061-

 

Keywords

NVD

 

CVE-2009-0091

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures