CVE-2014-4122

Published: Oct 15, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 omits the ASLR protection mechanism, which allows remote attackers to obtain potentially sensitive information about memory addresses by leveraging the predictability of an executable image's location, aka ".NET ASLR Vulnerability."

Affected (3)

Products: Microsoft: .net Framework

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 2.0 sp2
Microsoft .net Framework	Version 3.5.1
Microsoft .net Framework	Version 3.5

Related CWEs

References (8)

http://secunia.com/advisories/60969

Source: secure@microsoft.com

http://www.securityfocus.com/bid/70312

Source: secure@microsoft.com

http://www.securitytracker.com/id/1031021

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057

Source: secure@microsoft.com

http://secunia.com/advisories/60969

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/70312

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1031021

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-057

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.