CVE-2014-4073

Published: Oct 15, 2014Modified: May 6, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka ".NET ClickOnce Elevation of Privilege Vulnerability."

Affected (7)

Products: Microsoft: .net Framework

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 2.0 sp2
Microsoft .net Framework	Version 3.5.1
Microsoft .net Framework	Version 3.5
Microsoft .net Framework	Version 4.0
Microsoft .net Framework	Version 4.5.1
Microsoft .net Framework	Version 4.5.2
Microsoft .net Framework	Version 4.5

Related CWEs

References (10)

http://blogs.technet.com/b/srd/archive/2014/10/14/more-details-about-cve-2014-4073-elevation-of-privilege-vulnerability.aspx

Source: secure@microsoft.com

Vendor Advisory

http://secunia.com/advisories/60969

Source: secure@microsoft.com

http://www.securityfocus.com/bid/70313

Source: secure@microsoft.com

http://www.securitytracker.com/id/1031021

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057

Source: secure@microsoft.com

http://blogs.technet.com/b/srd/archive/2014/10/14/more-details-about-cve-2014-4073-elevation-of-privilege-vulnerability.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/60969

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/70313

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031021

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.