VULNERABILITY INTELLIGENCE
CVE-2012-0162
CVSS score9.3 HIGH
EPSS probability21.90%
CISA KEVNot currently listed
Published2012-05-09
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Microsoft .NET Framework 4 does not properly allocate buffers, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka ".NET Framework Buffer Allocation Vulnerability."
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer