VULNERABILITY INTELLIGENCE

CVE-2013-1336

CVSS score5 MEDIUM
EPSS probability19.26%
CISA KEVNot currently listed
Published2013-05-15
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed XML documents via unspecified vectors that preserve signature validity, aka "XML Digital Signature Spoofing Vulnerability."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references