CVE-2014-4073

Loading...

General

Score:10.0/10.0
Severity:High
Category:Access Control Error

Impact Metrics

Confidentiality:Complete
Integrity:Complete
Availability:Complete

Exploitability Metrics

Access Vector:Network
Access Complexity:Low
Authentication:None

Relative vulnerabilities

CVE-2014-4121, CVE-2014-4122

Published on 15/10/14 - Updated on 30/10/15

Description

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2014-4073
Agence Nationale de la Sécurité des Systèmes d'Information CERTFR-2014-AVI-423
Microsoft MS14-057
Renater 2014/VULN217

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
microsoft.net_framework

Share this vulnerability with:

Twitter Facebook LinkedIn Mail