NVD

Id
38981  
Name
CVE-2013-3131  
Description
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote attackers to execute arbitrary code via (1) a crafted .NET Framework application or (2) a crafted Silverlight application, aka "Array Access Violation Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-07-09  
Modified Date
2016-10-19  
Seq
2013-3131  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
199666 38981 CVE-2013-3131 oval:org.mitre.oval:def:17032  View
199667 38981 CVE-2013-3131 oval:org.mitre.oval:def:17261  View
199668 38981 CVE-2013-3131 MS13-052  View
199669 38981 CVE-2013-3131 TA13-190A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21680 JVNDB-2013-003255 Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性 Microsoft .NET Framework および Silverlight には、構造体の多次元配列のデータの変更を適切に制限しないため、任意のコードを実行される脆弱性が存在します。 CVE-2013-3131 63073 CVE-2013-3131 38981 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003255.html 2013-07-09 2013-07-24 View