CVE

Id
49890  
CVE No.
CVE-2011-1978  
Status
Candidate  
Description
Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Socket Restriction Bypass Vulnerability."  
Phase
Assigned (20110509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
541481 49890 CVE-2011-1978 MS:MS11-069  View
541482 49890 CVE-2011-1978 URL:http://www.microsoft.com/technet/security/Bulletin/MS11-069.mspx  View
541483 49890 CVE-2011-1978 OVAL:oval:org.mitre.oval:def:12901  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33112 JVNDB-2011-003352 複数の Microsoft Office 製品における任意のコードを実行される脆弱性 複数の Microsoft Office 製品には、任意のコードを実行される脆弱性が存在します。 CVE-2011-1983 49890 9.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003352.html  View