CVE-2012-2519

Published: Nov 14, 2012Modified: Apr 29, 2026

7.9

Vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 5.5 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET application, aka ".NET Framework Insecure Library Loading Vulnerability."

Affected (6)

Products: Microsoft: .net Framework

Microsoft

1 product

.net Framework

Configuration A

1 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 1.0 sp3

Running on/with	Platform Versions
Microsoft Windows Xp	Version 2005 sp3
Microsoft Windows Xp	Version 2005 sp3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 1.1 sp1

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 2.0 sp2

Running on/with	Platform Versions
Microsoft Windows Server 2008	All versions

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 3.5.1

Configuration E

1 vulnerable · 12 platform

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 4.0

Running on/with	Platform Versions
Microsoft Windows 7	All versions
Microsoft Windows 7	All versions
Microsoft Windows 7	All versions
Microsoft Windows 7	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Vista	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions