microsoft asp.net 3.5 vulnerabilities and exploits

(subscribe to this query)

ASP.NET in Microsoft .NET 3.5 does not properly handle an unencrypted view state, which allows remote malicious users to conduct cross-site scripting (XSS) attacks against the form control via the __VIEWSTATE parameter.

Microsoft Asp.net 3.5

1 Github repository

Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote malicious users to decrypt and modify encrypted Vie...

Microsoft .net Framework 1.1 Microsoft .net Framework 2.0 Microsoft .net Framework 3.5 Microsoft .net Framework 3.5.1 Microsoft .net Framework 4.0

3 EDB exploits1 Github repository

The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote malicious users to read arbitrary files via special characters in a URI in an HTTP request, aka "Ch...

Microsoft .net Framework 4.0 Microsoft Chart Control For Microsoft .net Framework 3.5

The x86 JIT compiler in Microsoft .NET Framework 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0 does not properly compile function calls, which allows remote malicious users to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (...

Microsoft .net Framework 4.0 Microsoft .net Framework 3.5.1 Microsoft .net Framework 2.0 Microsoft .net Framework 3.5

ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote malicious users to cause a denial of service (daemon outage) via a series of crafted HTTP...

Microsoft .net Framework 3.5 Microsoft Windows Vista -Microsoft .net Framework 2.0 Microsoft Windows Server 2008 -Microsoft Windows Vista

The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent malicious users to bypass intended access restrictions, and consequent...

Microsoft .net Framework 4.0 Microsoft .net Framework 3.5.1 Microsoft .net Framework 2.0 Microsoft .net Framework 3.5

1 EDB exploit

ASP.NET Elevation of Privilege Vulnerability

Microsoft .net Framework 4.8 Microsoft .net Framework 4.6.2 Microsoft .net Framework 4.7 Microsoft .net Framework 4.7.1 Microsoft .net Framework 4.7.2 Microsoft .net Framework 3.5 Microsoft .net Framework 4.8.1 Microsoft .net Framework 2.0

1 Github repository

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 prior to 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote malicious users to execute arbitrary code via (1) a crafted XAML b...

Microsoft .net Framework 4.0 Microsoft .net Framework 3.5.1 Microsoft .net Framework 2.0 Microsoft .net Framework 3.5 Microsoft Silverlight 4.0.60310.0

ASP.NET Security Feature Bypass Vulnerability

Microsoft .net Framework 2.0 Microsoft .net Framework 3.0 Microsoft .net Framework 3.5 Microsoft .net Framework 4.6.2 Microsoft .net Framework 4.7 Microsoft .net Framework 4.7.1 Microsoft .net Framework 4.7.2 Microsoft .net Framework 4.8 Microsoft .net Framework 4.8.1 Microsoft .net Framework 3.5.1

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook