ByteOS Network

CVE Vulnerability Details :

CVE-2011-1271

PUBLISHED

More Info Official Page

Assigner-microsoft

Assigner Org ID-f38d906d-7342-40ea-92c1-6c4a2c6478c8

Published At-10 May, 2011 | 19:00

Updated At-17 Oct, 2024 | 18:54

▼CVE Numbering Authority (CNA)

The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings, which allows context-dependent attackers to bypass intended access restrictions, and consequently execute arbitrary code, in opportunistic circumstances by leveraging a crafted application, as demonstrated by (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework JIT Optimization Vulnerability."

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12686	vdb-entry signature x_refsource_OVAL
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-044	vendor-advisory x_refsource_MS
http://stackoverflow.com/questions/2135509/bug-only-occurring-when-compile-optimization-enabled/	x_refsource_MISC

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12686

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-044

Resource:

vendor-advisory

x_refsource_MS

Hyperlink: http://stackoverflow.com/questions/2135509/bug-only-occurring-when-compile-optimization-enabled/

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12686	vdb-entry signature x_refsource_OVAL x_transferred
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-044	vendor-advisory x_refsource_MS x_transferred
http://stackoverflow.com/questions/2135509/bug-only-occurring-when-compile-optimization-enabled/	x_refsource_MISC x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12686

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-044

Resource:

vendor-advisory

x_refsource_MS

x_transferred

Hyperlink: http://stackoverflow.com/questions/2135509/bug-only-occurring-when-compile-optimization-enabled/

Resource:

x_refsource_MISC

x_transferred

2. CISA ADP Vulnrichment

Affected Products

Vendor

Microsoft Corporation

Product

.net_framework

CPEs

cpe:2.3:a:microsoft:.net_framework:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

3.5 Gold
3.5 SP1
3.5.1
4.0

Problem Types

Type	CWE ID	Description
CWE	CWE-476	CWE-476 NULL Pointer Dereference

Type: CWE

CWE ID: CWE-476

Description: CWE-476 NULL Pointer Dereference

Metrics

Version	Base score	Base severity	Vector
3.1	7.7	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Version: 3.1

Base score: 7.7

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References