- Home
- CVEs with nessus.description==The remote Windows host is running a version of the Microsoft .NET Framework that is affected by multiple vulnerabilities :
- A remote code execution vulnerability exists in the Microsoft .NET Framework that could allow a malicious Microsoft .NET application to obtain a managed pointer to stack memory that is no longer used. The malicious Microsoft .NET application could then use this pointer to modify legitimate values placed at that stack location later, leading to arbitrary, unmanaged code execution.
Microsoft .NET applications that are not malicious are not at risk for being compromised because of this vulnerability.(CVE-2009-0090)
- A remote code execution vulnerability exists in the Microsoft .NET Framework that could allow a malicious Microsoft .NET application to bypass a type equality check. The malicious Microsoft .NET could exploit this vulnerability by casting an object of one type into another type, leading to arbitrary, unmanaged code execution. Microsoft .NET applications that are not malicious are not at risk for being compromised because of this vulnerability.(CVE-2009-0091)
- A remote code execution vulnerability exists in the Microsoft .NET Framework that can allow a malicious Microsoft .NET application or a malicious Silverlight application to modify memory of the attacker's choice, leading to arbitrary, unmanaged code execution. Microsoft .NET applications and Silverlight applications that are not malicious are not at risk for being compromised because of this vulnerability.(CVE-2009-2497)
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top