critical10.0
CVE-2014-4121
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse internationalized resource identifiers, which allows remote atta…
Impact
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse internationalized resource identifiers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted request to a .NET web application, aka ".NET Framework Remote Code Execution Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | .Net Framework | Versions 2.0, 3.5, 3.5.1, 4.0, 4.5, 4.5.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/60969
- http://www.securityfocus.com/bid/70351
- http://www.securitytracker.com/id/1031021
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057
- http://secunia.com/advisories/60969
- http://www.securityfocus.com/bid/70351
- http://www.securitytracker.com/id/1031021
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057