Skip to content
OpenAdvisories
Unscored CVE-2016-0132 EUVD-2016-0170GHSA-8f8h-wpxr-85cv

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XM…

Published Mar 9, 2016 · Updated Aug 5, 2024 · Assigned by microsoft

Description

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."

References