Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Pointer Verification Vulnerability." for Windows Vista Service Pack 1 and Windows Server 2008(KB974469) x64 bases systems
Vulnerability Name Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Pointer Verification Vulnerability." for Windows Vista Service Pack 1 and Windows Server 2008(KB974469) x64 bases systems
Severity Critical
Exploits Not available
CVE ID CVE-2009-0090,CVE-2009-0091,CVE-2009-2497
CVSS 2.09 (I:C/AV:N/Au:N/AC:M/A:C/C:C)
Solution Windows6.0-KB2518865-x64.msu
Published Date 13/10/2009
Updated Date 11/08/2010

Disclaimer: This webpage is intended to provide you information about vulnerability announcement for certain specific software products. The information is provided "As Is" without warranty of any kind. The links provided point to pages on the vendors websites. You can get more information by clicking the links to visit the relevant pages on the vendors website.