Microsoft .NET Framework CVE-2013-3860 Remote Denial of Service Vulnerability

Bugtraq ID:	62820
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-3860
Remote:	Yes
Local:	No
Published:	Oct 08 2013 12:00AM
Updated:	Oct 10 2013 08:44AM
Credit:	James Forshaw of Context Information Security
Vulnerable:	Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.0 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 Microsoft .NET Framework 2.0 SP2 Avaya Messaging Application Server 0 Avaya Meeting Exchange - Web Conferencing Server 0 Avaya Meeting Exchange - Streaming Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0 Avaya Communication Server 1000 Telephony Manager 0 Avaya CallPilot 0 Avaya Aura Conferencing Standard
Not Vulnerable:

Microsoft .NET Framework CVE-2013-3860 Remote Denial of Service Vulnerability

Microsoft .NET Framework is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an application to crash or become unresponsive, denying service to legitimate users.

Microsoft .NET Framework CVE-2013-3860 Remote Denial of Service Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

Microsoft .NET Framework CVE-2013-3860 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft .NET Framework CVE-2013-3860 Remote Denial of Service Vulnerability

References:

• .NET Framework Homepage (Microsoft)