CVE-2014-4149

Published: Nov 11, 2014Modified: May 6, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly perform TypeFilterLevel checks, which allows remote attackers to execute arbitrary code via crafted data to a .NET Remoting endpoint, aka "TypeFilterLevel Vulnerability."

Affected (8)

Products: Microsoft: .net Framework

Microsoft

1 product

.net Framework

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 1.1 sp1
Microsoft .net Framework	Version 2.0 sp2
Microsoft .net Framework	Version 3.5.1
Microsoft .net Framework	Version 3.5
Microsoft .net Framework	Version 4.0
Microsoft .net Framework	Version 4.5.1
Microsoft .net Framework	Version 4.5.2
Microsoft .net Framework	Version 4.5