CVE-2014-4149

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 21%

probabilidade de exploração

21%top 2% das CVEs

exploração observada

nãonenhuma fonte reporta

Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly perform TypeFilterLevel checks, which allows remote attackers to execute arbitrary code via crafted data to a .NET Remoting endpoint, aka "TypeFilterLevel Vulnerability."

Produtos afetados

n/a · n/a

Referências

http://blogs.technet.com/b/srd/archive/2014/11/11/ms14-072-net-remoting-elevation-of-privilege-vulnerability.aspx https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-072 http://www.securitytracker.com/id/1031188