NVD

Id
8846  
Name
CVE-2011-1978  
Description
Microsoft .NET Framework 2.0 SP2, 3.5.1, and 4 does not properly validate the System.Net.Sockets trust level, which allows remote attackers to obtain sensitive information or trigger arbitrary outbound network traffic via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Socket Restriction Bypass Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-08-10  
Modified Date
2011-09-21  
Seq
2011-1978  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
51005 8846 CVE-2011-1978 oval:org.mitre.oval:def:12901  View
51006 8846 CVE-2011-1978 MS11-069  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31901 JVNDB-2011-002141 Microsoft .NET Framework における重要な情報を取得される脆弱性 Microsoft .NET Framework は、System.Net.Sockets の信頼レベルを適切に検証しないため、重要な情報を取得される、または任意のアウトバウンドネットワークトラフィックを誘発する脆弱性が存在します。 CVE-2011-1978 49885 CVE-2011-1978 8846 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002141.html 2011-08-09 2011-08-25 View