CVE-2013-0073

N/A

Published: February 13, 2013 at 11:00 AM UTC

Updated: June 16, 2026 at 11:48 PM UTC

8 products affected across 1 vendor.NET FrameworkWindows Server 2012Windows Server 2008

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 30%

Description

The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict the privileges of a callback function during object creation, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "WinForms Callback Elevation Vulnerability."

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

.NET Framework · Microsoft

95%

2.0 sp2 3.5 3.5.1 4.0 4.5

microsoft-windows-7 (environment) · microsoft-windows-8 (environment) · microsoft-windows-server-2003 (environment) · microsoft-windows-server-2008 (environment) · microsoft-windows-server-2012 (environment) · microsoft-windows-vista (environment) · microsoft-windows-xp (environment)

Windows 7 · Microsoftdevice

80%

All versions

Windows 8 · Microsoftdevice

80%

All versions

Windows Server 2003 · Microsoftdevice

80%

All versions

Windows Server 2008 · Microsoftdevice

80%

All versions