Vulnerability Name:

CVE-2006-1511 (CCN-25438)

Assigned:2006-03-27
Published:2006-03-27
Updated:2017-07-20
Summary:Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0 and 1.1 Framework might allow user-assisted attackers to execute arbitrary code via a .il file that calls a function with a long name.
CVSS v3 Severity:5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:5.1 Medium (CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
5.1 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Gain Access
References:Source: CCN
Type: Full-Disclosure Mailing List, Sun Mar 26 2006 - 18:53:24 CST
Buffer OverFlow in ILASM and ILDASM

Source: MITRE
Type: CNA
CVE-2006-1511

Source: FULLDISC
Type: UNKNOWN
20060327 Buffer OverFlow in ILASM and ILDASM

Source: CCN
Type: Microsoft .NET Framework Developer Center
SDKs, Redistributables & Service Packs

Source: MISC
Type: Exploit
http://owasp.net/forums/234/showpost.aspx

Source: MISC
Type: UNKNOWN
http://owasp.net/forums/257/showpost.aspx

Source: CCN
Type: SA19406
Microsoft .NET Framework SDK ildasm Buffer Overflow

Source: SECUNIA
Type: Vendor Advisory
19406

Source: CCN
Type: OSVDB ID: 24207
Microsoft .NET Framework ILASM .il File Processing Overflow

Source: BID
Type: Exploit
17243

Source: CCN
Type: BID-17243
Microsoft .NET Framework SDK MSIL Tools Buffer Overflow Vulnerabilities

Source: VUPEN
Type: UNKNOWN
ADV-2006-1113

Source: XF
Type: UNKNOWN
ms-dotnet-ilasm-bo(25438)

Source: XF
Type: UNKNOWN
ms-dotnet-ilasm-bo(25438)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:microsoft:.net_framework:1.0:*:sdk:*:*:*:*:*
  • OR cpe:/a:microsoft:.net_framework:1.0:sp1:sdk:*:*:*:*:*
  • OR cpe:/a:microsoft:.net_framework:1.0:sp2:sdk:*:*:*:*:*
  • OR cpe:/a:microsoft:.net_framework:1.1:*:sdk:*:*:*:*:*
  • OR cpe:/a:microsoft:.net_framework:1.1:sp1:sdk:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/a:microsoft:.net_framework:1.0:-:*:*:*:*:*:*
  • OR cpe:/a:microsoft:.net_framework:1.1:-:*:*:*:*:*:*
  • OR cpe:/a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    BACK
    microsoft .net framework 1.0
    microsoft .net framework 1.0 sp1
    microsoft .net framework 1.0 sp2
    microsoft .net framework 1.1
    microsoft .net framework 1.1 sp1
    microsoft .net framework 1.0
    microsoft .net framework 1.1
    microsoft .net framework 1.1 sp1