← back
CVE-2012-1896

CVE-2012-1896

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 24%
exploitation probability
24%top 2% of all CVEs
observed exploitation
nono source reports it
Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Code Access Security Info Disclosure Vulnerability."
Affected products
n/a · n/a
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-074http://secunia.com/advisories/51236https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15785http://www.securityfocus.com/bid/56456http://www.securitytracker.com/id?1027753http://www.us-cert.gov/cas/techalerts/TA12-318A.html