Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Type Verification Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft .NET Framework Type Verification 远程代码执行漏洞
Vulnerability Description
Microsoft .NET Framework 2.0版本,2.0 SP1版本和3.5版本没有适当地在.NET 的自变量代码中运行一某个类型同等的限制,这会允许远程攻击者可以借助(1)一个特制的XAML浏览器应用程序(XBAP),(2)一个特制的ASP.NET应用程序或(3)一个特制的.NET框架应用程序,,获得没有预先设置的对栈内存的访问权,并执行任意代码,该漏洞又称"Microsoft .NET Framework指针验证漏洞"。
CVSS Information
N/A
Vulnerability Type
N/A