Microsoft .NET Framework Input Serialization CVE-2012-0160 Remote Code Execution Vulnerability
BID:53356
Info
Microsoft .NET Framework Input Serialization CVE-2012-0160 Remote Code Execution Vulnerability
| Bugtraq ID: | 53356 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-0160 |
| Remote: | Yes |
| Local: | No |
| Published: | May 08 2012 12:00AM |
| Updated: | May 31 2012 10:00PM |
| Credit: | James Forshaw of Context Information Security |
| Vulnerable: |
Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.0 SP2 Microsoft .NET Framework 2.0 SP2 Microsoft .NET Framework 2.0 SP1 Microsoft .NET Framework 1.1 SP1 Microsoft .NET Framework 1.0 SP3 Microsoft .NET Framework 1.0 SP2 Microsoft .NET Framework 1.0 SP1 Avaya Messaging Application Server 5.2 Avaya Messaging Application Server 5 Avaya Meeting Exchange - Webportal 6.0 Avaya Meeting Exchange - Web Conferencing Server 0 Avaya Meeting Exchange - Streaming Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0 Avaya Communication Server 1000 Telephony Manager 4.0 Avaya Communication Server 1000 Telephony Manager 3.0 Avaya CallPilot 5.0 Avaya CallPilot 4.0 Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 Standard Avaya Aura Conferencing 6.0 SP1 Standard |
| Not Vulnerable: | |
References
Microsoft .NET Framework Input Serialization CVE-2012-0160 Remote Code Execution Vulnerability
References:
References:
- Microsoft Homepage (Microsoft)
- ASA-2012-217: MS12-035 Vulnerabilities in .NET Framework Could Allow Remote Code (Avaya)
- Context IS Advisory - .NET 1.0 through .NET 4 Remote Code Execution (Context Information Security)
- Microsoft Security Bulletin MS12-035 (Microsoft)