CVE-2014-4073

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 23%

exploitation probability

23%top 2% of all CVEs

observed exploitation

nono source reports it

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."

Affected products

n/a · n/a

References

http://blogs.technet.com/b/srd/archive/2014/10/14/more-details-about-cve-2014-4073-elevation-of-privilege-vulnerability.aspx https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057 http://secunia.com/advisories/60969 http://www.securityfocus.com/bid/70313 http://www.securitytracker.com/id/1031021