NVD

Id
46086  
Name
CVE-2012-4776  
Description
The Web Proxy Auto-Discovery (WPAD) functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not validate configuration data that is returned during acquisition of proxy settings, which allows remote attackers to execute arbitrary JavaScript code by providing crafted data during execution of (1) an XAML browser application (aka XBAP) or (2) a .NET Framework application, aka "Web Proxy Auto-Discovery Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-11-13  
Modified Date
2013-11-02  
Seq
2012-4776  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231250 46086 CVE-2012-4776 oval:org.mitre.oval:def:15810  View
231251 46086 CVE-2012-4776 MS12-074  View
231252 46086 CVE-2012-4776 56463  View
231253 46086 CVE-2012-4776 1027753  View
231254 46086 CVE-2012-4776 TA12-318A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29644 JVNDB-2012-005351 Microsoft .NET Framework の Web プロキシ自動発見 (WPAD) 機能における任意の JavaScript コードを実行される脆弱性 Microsoft .NET Framework の Web プロキシ自動発見 (WPAD) 機能は、プロキシ設定の取得中に返される構成データを検証しないため、任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2012-4776 58014 CVE-2012-4776 46086 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005351.html 2012-11-13 2012-11-16 View