CVE-2009-0091
14.10.2009, 10:30
Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Type Verification Vulnerability."
| Vendor | Product | Version |
|---|---|---|
| microsoft | windows_2000 | * |
| microsoft | .net_framework | 1.1:sp1 |
| microsoft | .net_framework | 2.0:sp1 |
| microsoft | .net_framework | 2.0:sp2 |
| microsoft | windows_server_2003 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | - |
| microsoft | windows_server_2008 | - |
| microsoft | .net_framework | 1.1:sp1 |
| microsoft | .net_framework | 2.0:sp1 |
| microsoft | .net_framework | 2.0:sp2 |
| microsoft | .net_framework | 3.5 |
| microsoft | .net_framework | 3.5:sp1 |
| microsoft | windows_vista | * |
| microsoft | windows_vista | * |
| microsoft | windows_vista | * |
| microsoft | windows_vista | * |
| microsoft | .net_framework | 1.1:sp1 |
| microsoft | .net_framework | 2.0 |
| microsoft | .net_framework | 2.0:sp1 |
| microsoft | .net_framework | 2.0:sp2 |
| microsoft | .net_framework | 3.5 |
| microsoft | .net_framework | 3.5:sp1 |
| microsoft | .net_framework | 1.1:sp1 |
| microsoft | windows_7 | - |
| microsoft | windows_server_2008 | * |
| microsoft | windows_server_2008 | * |
| microsoft | .net_framework | 1.0:sp3 |
| microsoft | .net_framework | 1.1:sp1 |
| microsoft | .net_framework | 2.0:sp1 |
| microsoft | .net_framework | 2.0:sp2 |
| microsoft | .net_framework | 3.5 |
| microsoft | .net_framework | 3.5:sp1 |
| microsoft | windows_xp | * |
| microsoft | windows_xp | * |
| microsoft | windows_xp | - |
𝑥
= Vulnerable software versions
References