CVE-2012-1895

N/A

Published: November 14, 2012 at 12:00 AM UTC

Updated: June 16, 2026 at 11:40 PM UTC

6 products affected across 1 vendor.NET FrameworkWindows Server 2008Windows 7

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 23%

Description

The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 does not properly enforce object permissions, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Reflection Bypass Vulnerability."

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

.NET Framework · Microsoft

95%

1.0 sp3 1.1 sp1 2.0 sp2 3.5.1 4.0

microsoft-windows-7 (environment) · microsoft-windows-server-2003 (environment) · microsoft-windows-server-2008 (environment) · microsoft-windows-vista (environment) · microsoft-windows-xp (environment)

Windows 7 · Microsoftdevice

80%

All versions

Windows Server 2003 · Microsoftdevice

80%

All versions

Windows Server 2008 · Microsoftdevice

80%

All versions

Windows Vista · Microsoftdevice

80%

All versions