CVE-2005-0509

Published: Mar 14, 2005Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Mono 1.0.5 implementation of ASP.NET (.Net) allow remote attackers to inject arbitrary HTML or web script via Unicode representations for ASCII fullwidth characters that are converted to normal ASCII characters, including ">" and "<".

Affected (6)

Products: Microsoft: .net Framework · Mono: Mono

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 1.0
Microsoft .net Framework	Version 1.0 sp1
Microsoft .net Framework	Version 1.0 sp2
Microsoft .net Framework	Version 1.1
Microsoft .net Framework	Version 1.1 sp1
Mono Mono	Version 1.0.5

References (6)

http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110867912714913&w=2

Source: cve@mitre.org

http://secunia.com/advisories/14325

Source: cve@mitre.org

PatchVendor Advisory

http://it-project.ru/andir/docs/aspxvuln/aspxvuln.en.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=110867912714913&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/14325

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.