Vulnerability

(MS13-040) Vulnerabilities in .NET Framework Could Allow Spoofing (2836440)

Publish date: June 14, 2013

CVE-2013-1336,CVE-2013-1337

SEVERITY

MEDIUM

//  ADVISORY DATE

14 JUN 2013


DESCRIPTION

This security update patches two vulnerabilities in the Microsoft .NET Framework. The more severe of the vulnerabilities could allow spoofing if a .NET application receives a maliciously crafted XML file. An attacker who successfully exploited the vulnerabilities could modify the contents of an XML file without invalidating the file's signature and could gain access to endpoint functions as if they were an authenticated user.

SOLUTION

AFFECTED SOFTWARE AND VERSION

  • Microsoft .NET Framework 2.0 Service Pack 2
  • Microsoft .NET Framework 4
  • Microsoft .NET Framework 4.5
  • Microsoft .NET Framework 3.5.1
  • Microsoft .NET Framework 3.5

Featured Stories

Connect with us on