CVE-2013-3171 | BDVDB-2026-56529 Detail

Description#

The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a partial-trust relationship, aka "Delegate Serialization Vulnerability."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16867
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-052
http://www.us-cert.gov/ncas/alerts/TA13-190A

Exploit#

No public exploit known

History#

Version 12013-07-10Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.