HTTP: Microsoft .NET Framework XAML Browser Applications Stack Corruption1

This signature detects attempts to exploit a known vulnerability against Microsoft .NET Framework. It is due to memory corruption when handling method calls that take structures with misaligned fields as parameters. Remote attackers could exploit this vulnerability by either enticing target users to visit a malicious web page containing an XBAP (XAML browser application), or by uploading an ASP.NET application to a vulnerable server. Successful exploitation could result in execution of arbitrary code within the security context of the currently logged on user. An unsuccessful exploit attempt may terminate the PresentationHost.exe .NET component.

Short Name

HTTP:MS-DOT-NET-XAML-RCE1

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Microsoft .NET Framework XAML Browser Applications Stack Corruption1

Found a potential security threat?