Unscored CVE-2014-4073 EUVD-2014-4004GHSA-h6h5-h2pp-h9f3

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce inst…

Published Oct 15, 2014 · Updated Aug 6, 2024 · Assigned by microsoft

Description

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."

References

MS14-057 vendor-advisory
60969 third-party-advisory
1031021 vdb-entry
70313 vdb-entry
http://blogs.technet.com/b/srd/archive/2014/10/14/more-details-about-cve-2014-4073-elevation-of-privilege-vulnerability.aspx