VULNERABILITY INTELLIGENCE

CVE-2010-3958

CVSS score9.3 HIGH
EPSS probability23.59%
CISA KEVNot currently listed
Published2011-04-13
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Stack Corruption Vulnerability."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references