VULNERABILITY INTELLIGENCE

CVE-2012-0163

CVSS score9.3 HIGH
EPSS probability38.25%
CISA KEVNot currently listed
Published2012-04-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly validate function parameters, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Parameter Validation Vulnerability."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references