CVE-2013-3131

Published Jul 10, 2013

Last updated 6 years ago

Overview

Description: Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote attackers to execute arbitrary code via (1) a crafted .NET Framework application or (2) a crafted Silverlight application, aka "Array Access Violation Vulnerability."
Source: secure@microsoft.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-94

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "42A6DF09-B8E1-414D-97E7-453566055279"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E039CE1F-B988-4741-AE2E-5B36E2AF9688"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8EDC4407-7E92-4E60-82F0-0C87D1860D3A"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:.net_framework:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "792B417F-96A0-4E9D-9E79-5D7F982E2225"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:.net_framework:4.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "61FAD9EE-FA7F-4B39-8A9B-AFFAEC8BF214"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:silverlight:5.0.60401.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2AA0FEB3-5F4B-4B80-A1C8-C266FD94FAAA"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:silverlight:5.0.60818.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7857A98D-A532-4AD4-A565-87C1D86F67DC"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:silverlight:5.0.60818.0:rc:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0988E68C-BB81-44B6-977E-33EF7EF6832B"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:silverlight:5.0.61118.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D8A4133E-7BC4-4CE7-B55A-BBB47DE51134"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:silverlight:5.1.10411.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AF75D8B8-024E-4919-8B65-1F28377BC97C"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:silverlight:5.1.20125.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "604FEABE-24BC-40A3-9F36-F49A3F91559C"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References