Published: 15/05/2013 Updated: 12/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote malicious users to make undetected changes to signed XML documents via unspecified vectors that preserve signature validity, aka "XML Digital Signature Spoofing Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft .net framework 4.5
microsoft .net framework 3.5.1
microsoft .net framework 4.0
microsoft .net framework 2.0
microsoft .net framework 3.5

CWE-20 http://www.us-cert.gov/ncas/alerts/TA13-134A https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16559 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-040 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-1336

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect