CVE-2015-2504
N/A
N/A
Summary
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 improperly counts objects before performing an array copy, which allows remote attackers to (1) execute arbitrary code via a crafted XAML browser application (XBAP) or (2) bypass Code Access Security restrictions via a crafted .NET Framework application, aka ".NET Elevation of Privilege Vulnerability."
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.securitytracker.com/id/1033493
- http://www.securityfocus.com/bid/76560
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-101
References
- http://www.securitytracker.com/id/1033493
- http://www.securityfocus.com/bid/76560
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-101
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.