CVE-2015-1672

Published: May 13, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to cause a denial of service (recursion and performance degradation) via crafted encrypted data in an XML document, aka ".NET XML Decryption Denial of Service Vulnerability."

Affected (7)

Products: Microsoft: .net Framework

Microsoft

1 product

.net Framework

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Microsoft .net Framework	Version 2.0 sp2
Microsoft .net Framework	Version 3.5.1
Microsoft .net Framework	Version 3.5
Microsoft .net Framework	Version 4.0
Microsoft .net Framework	Version 4.5.1
Microsoft .net Framework	Version 4.5.2
Microsoft .net Framework	Version 4.5