CVE

Id
39932  
CVE No.
CVE-2009-2497  
Status
Candidate  
Description
The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted Silverlight application, (3) a crafted ASP.NET application, or (4) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Vulnerability."  
Phase
Assigned (20090717)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
438937 39932 CVE-2009-2497 MS:MS09-061  View
438938 39932 CVE-2009-2497 URL:http://www.microsoft.com/technet/security/Bulletin/MS09-061.mspx  View
438939 39932 CVE-2009-2497 CERT:TA09-286A  View
438940 39932 CVE-2009-2497 URL:http://www.us-cert.gov/cas/techalerts/TA09-286A.html  View
438941 39932 CVE-2009-2497 OVAL:oval:org.mitre.oval:def:6510  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41228 JVNDB-2009-002235 GDI+ の PNG 画像ファイル処理におけるバッファオーバーフローの脆弱性 複数の Microsoft 製品で使用される GDI+ には、PNG 画像ファイルの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2501 39932 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002235.html  View