CVE-2012-1896

N/A

Published: November 14, 2012 at 12:00 AM UTC

Updated: June 16, 2026 at 11:40 PM UTC

6 products affected across 1 vendor.NET FrameworkWindows Server 2008Windows 7

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 24%

Description

Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive information via (1) a crafted XAML browser application (aka XBAP) or (2) a crafted .NET Framework application, aka "Code Access Security Info Disclosure Vulnerability."

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

.NET Framework · Microsoft

95%

2.0 sp2 3.5.1

microsoft-windows-7 (environment) · microsoft-windows-server-2003 (environment) · microsoft-windows-server-2008 (environment) · microsoft-windows-vista (environment) · microsoft-windows-xp (environment)

Windows 7 · Microsoftdevice

80%

All versions

Windows Server 2003 · Microsoftdevice

80%

All versions

Windows Server 2008 · Microsoftdevice

80%

All versions

Windows Vista · Microsoftdevice

80%

All versions