CVE-2011-0664

N/A

Published: June 16, 2011 at 08:21 PM UTC

Updated: June 16, 2026 at 11:27 PM UTC

8 products affected across 1 vendor.NET FrameworkSilverlightWindows Server 2008

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 16%

Description

Microsoft .NET Framework 2.0 SP1 and SP2, 3.5 Gold and SP1, 3.5.1, and 4.0, and Silverlight 4 before 4.0.60531.0, does not properly validate arguments to unspecified networking API functions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, (3) a crafted .NET Framework application, or (4) a crafted Silverlight application, aka ".NET Framework Array Offset Vulnerability."

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

.NET Framework · Microsoft

95%

2.0 sp1 2.0 sp2 3.5 3.5 sp1 3.5.1 4.0

microsoft-windows-2003-server (environment) · microsoft-windows-7 (environment) · microsoft-windows-server-2003 (environment) · microsoft-windows-server-2008 (environment) · microsoft-windows-vista (environment) · microsoft-windows-xp (environment)

Silverlight · Microsoft

95%

4.0.60310.0

Windows 2003 Server · Microsoftdevice

80%

All versions

Windows 7 · Microsoftdevice

80%

All versions

Windows Server 2003 · Microsoftdevice

80%

All versions