Microsoft .NET Framework Version 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:.net_framework:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | .Net Framework (6989685b-1c13-5505-b0b5-cec5bc25351e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-2085 |
vulnerable | 2026-06-08 04:54:11.618625 |
Details available
The default configuration of ASP.NET in Microsoft .NET before 1.1 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the __VIEWSTATE parameter.
Published: 2010-05-27T18:32:00.000Z
Updated: 2024-09-17T02:47:15.935Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0043 |
vulnerable | 2026-06-08 04:49:31.244395 |
Details available
The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows user-assisted remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer," probably a buffer overflow, aka ".NET JIT Compiler Vulnerability".
Published: 2007-07-10T22:00:00.000Z
Updated: 2024-08-07T12:03:36.982Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0042 |
vulnerable | 2026-06-08 04:49:31.243855 |
Details available
Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the final substring of a string, via %00 characters, related to use of %00 as a string terminator within POSIX functions but a data character within .NET strings, aka "Null Byte Termination Vulnerability."
Published: 2007-07-10T22:00:00.000Z
Updated: 2024-08-07T12:03:36.861Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0041 |
vulnerable | 2026-06-08 04:49:31.242740 |
Details available
The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to execute arbitrary code via unspecified vectors involving an "unchecked buffer" and unvalidated message lengths, probably a buffer overflow.
Published: 2007-07-10T22:00:00.000Z
Updated: 2024-08-07T12:03:37.003Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1510 |
vulnerable | 2026-06-08 04:48:57.345434 |
Details available
Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with a large static method.
Published: 2006-03-30T01:00:00.000Z
Updated: 2024-08-07T17:12:22.325Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-0509 |
vulnerable | 2026-06-08 04:48:12.866550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0409 |
vulnerable | 2026-06-08 04:46:21.370883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0369 |
vulnerable | 2026-06-08 04:46:21.299615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.