Oval Definition:oval:org.mitre.oval:def:17421
Revision Date:2014-08-18Version:25
Title:Anonymous method injection vulnerability in Microsoft .NET Framework - MS13-052
Description:Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Anonymous Method Injection Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-3133
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft .NET Framework 2.0
Microsoft .NET Framework 3.5
Microsoft .NET Framework 3.5.1
Microsoft .NET Framework 4.0
Microsoft .NET Framework 4.5
Definition Synopsis
  • .net 2.0 sp2/xp/server 2003/versions
  • either os
  • Microsoft Windows XP x64 is installed
  • OR Microsoft Windows XP (32-bit) is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2003 (ia64) Gold is installed
  • AND Microsoft .NET Framework 2.0 Service Pack 2 is installed
  • AND either file versions GDR/LDR
  • Check if the version of mscorlib.dll is less than 2.0.50727.3649
  • OR ldr range
  • Check if the version of mscorlib.dll is less than 2.0.50727.7026
  • AND Check if the version of mscorlib.dll is greater than or equal to 2.0.50727.7000
  • OR .net 2.0 sp2/vista/server 2008/versions
  • either os
  • Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • AND Microsoft .NET Framework 2.0 Service Pack 2 is installed
  • AND either file versions
  • Check if the version of mscorlib.dll is less than 2.0.50727.4241
  • OR ldr range
  • Check if the version of mscorlib.dll is less than 2.0.50727.7025
  • AND Check if the version of mscorlib.dll is greater than or equal to 2.0.50727.7000
  • OR .net 3.5/win8/server 2012/versions
  • either os
  • Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • OR Microsoft Windows 8 (x86) is installed
  • AND Microsoft .NET Framework 3.5 SP1 is installed
  • AND either file versions
  • Check if the version of mscorlib.dll is less than 2.0.50727.6407
  • OR ldr range
  • Check if the version of mscorlib.dll is less than 2.0.50727.7025
  • AND Check if the version of mscorlib.dll is greater than or equal to 2.0.50727.7000
  • OR .net 3.5.1/win 7/server 2008 R2/versions
  • either os
  • Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND Microsoft .NET Framework 3.5 SP1 is installed
  • AND either file versions
  • Check if the version of mscorlib.dll is less than 2.0.50727.5472
  • OR ldr range
  • Check if the version of mscorlib.dll is less than 2.0.50727.7025
  • AND Check if the version of mscorlib.dll is greater than or equal to 2.0.50727.7000
  • OR .net 4.0/win xp.server 2003/vista/server 2008/win 7/server 2008 R2/versions
  • either os
  • Microsoft Windows XP x64 is installed
  • OR Microsoft Windows XP (32-bit) is installed
  • OR Microsoft Windows Server 2003 (32-bit) is installed
  • OR Microsoft Windows Server 2003 (x64) is installed
  • OR Microsoft Windows Server 2003 (ia64) Gold is installed
  • OR Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows Server 2008 (ia-64) is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
  • AND Microsoft .NET Framework 4.0 is installed
  • AND either file versions
  • Check if the version of mscorlib.dll is less than 4.0.30319.1008
  • OR ldr range
  • Check if the version of mscorlib.dll is less than 4.0.30319.2012
  • AND Check if the version of mscorlib.dll is greater than or equal to 4.0.30319.2000
  • OR .net 4.5/vista/server 2008/win 7/server 2008 R2/versions
  • either os
  • Microsoft Windows Vista x64 Edition is installed
  • OR Microsoft Windows Vista (32-bit) is installed
  • OR Microsoft Windows Server 2008 (64-bit) is installed
  • OR Microsoft Windows Server 2008 (32-bit) is installed
  • OR Microsoft Windows 7 (32-bit) is installed
  • OR Microsoft Windows 7 x64 Edition is installed
  • OR Microsoft Windows Server 2008 R2 x64 Edition is installed
  • AND Microsoft .NET Framework 4.5 is installed
  • AND either file versions
  • Check if the version of mscorlib.dll is less than 4.0.30319.18052
  • OR ldr range
  • Check if the version of mscorlib.dll is less than 4.0.30319.19080
  • AND Check if the version of mscorlib.dll is greater than or equal to 4.0.30319.19000
  • OR .net 4.5/win 8/server 2012/versions
  • either os
  • Microsoft Windows 8 (x64) is installed
  • OR Microsoft Windows Server 2012 (64-bit) is installed
  • OR Microsoft Windows 8 (x86) is installed
  • AND Microsoft .NET Framework 4.5 is installed
  • AND either file versions
  • Check if the version of mscorlib.dll is less than 4.0.30319.18051
  • OR ldr range
  • Check if the version of mscorlib.dll is less than 4.0.30319.19079
  • AND Check if the version of mscorlib.dll is greater than or equal to 4.0.30319.19000
    • BACK