Vulnerability in Microsoft .Net Framework
CVE-2012-0164
Microsoft .NET Framework 4 does not properly compare index values, which allows remote attackers to cause a denial of service (application hang) via crafted requests to a Windows Presentation Foundation (WPF) application, aka ".NET Framework Index Comparison Vulnerability."
EPSS: 0.172 (96.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft .Net_framework — versions 4.0
- N/a — versions n/a
References
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)