Microsoft .NET Framework 2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:.net_framework:2.0:*:*:*:*:*:*:*
part: a version: 2.0 update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | .Net Framework (6989685b-1c13-5505-b0b5-cec5bc25351e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2497 |
vulnerable | 2026-06-08 04:51:28.951401 |
Details available
The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted Silverlight application, (3) a crafted ASP.NET application, or (4) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Vulnerability."
Published: 2009-10-14T10:00:00.000Z
Updated: 2024-08-07T05:52:14.789Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0091 |
vulnerable | 2026-06-08 04:51:07.633031 |
Details available
Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Type Verification Vulnerability."
Published: 2009-10-14T10:00:00.000Z
Updated: 2024-08-07T04:24:17.083Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-0090 |
vulnerable | 2026-06-08 04:51:07.628302 |
Details available
Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory, and execute arbitrary code, via (1) a crafted XAML browser application (XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka "Microsoft .NET Framework Pointer Verification Vulnerability."
Published: 2009-10-14T10:00:00.000Z
Updated: 2024-08-07T04:24:17.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3843 |
vulnerable | 2026-06-08 04:50:36.857237 |
Details available
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework with the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "<~/" (less-than tilde slash) sequence followed by a crafted STYLE element.
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T09:53:00.395Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3842 |
vulnerable | 2026-06-08 04:50:36.850062 |
Details available
Request Validation (aka the ValidateRequest filters) in ASP.NET in Microsoft .NET Framework without the MS07-040 update does not properly detect dangerous client input, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a query string containing a "</" (less-than slash) sequence.
Published: 2008-08-27T20:00:00.000Z
Updated: 2024-08-07T09:53:00.418Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0043 |
vulnerable | 2026-06-08 04:49:31.244429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0042 |
vulnerable | 2026-06-08 04:49:31.243888 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0041 |
vulnerable | 2026-06-08 04:49:31.243306 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-7192 |
vulnerable | 2026-06-08 04:49:30.512115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3436 |
vulnerable | 2026-06-08 04:49:09.307859 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1300 |
vulnerable | 2026-06-08 04:48:56.858006 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.