NVD

Id
32122  
Name
CVE-2014-4073  
Description
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-10-15  
Modified Date
2015-10-30  
Seq
2014-4073  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
168988 32122 CVE-2014-4073 http://blogs.technet.com/b/srd/archive/2014/10/14/more-details-about-cve-2014-4073-elevation-of-privilege-vulnerability.aspx  View
168989 32122 CVE-2014-4073 MS14-057  View
168990 32122 CVE-2014-4073 70313  View
168991 32122 CVE-2014-4073 1031021  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15901 JVNDB-2014-004776 Microsoft .NET Framework における権限昇格の脆弱性 Microsoft .NET Framework は、ClickOnce インストーラーとの通信中に適切なデータ処理を行わないため、権限を取得される脆弱性が存在します。 CVE-2014-4073 71361 CVE-2014-4073 32122 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004776.html 2014-10-14 2014-10-17 View