Microsoft .NET Framework 3.51 Service Pack 1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:.net_framework:3.5:sp1:*:*:*:*:*:*

part: a version: 3.5 update: sp1

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
Product.Net Framework (6989685b-1c13-5505-b0b5-cec5bc25351e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-8540 vulnerable 2026-06-08 05:12:06.124348 Details available
A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.7.2, Microsoft .NET Framework 4.6.2.
Published: 2018-12-12T00:00:00.000Z
Updated: 2024-08-05T07:02:25.451Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8517 vulnerable 2026-06-08 05:12:06.101686 Details available
A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 4.7.2.
Published: 2018-12-12T00:00:00.000Z
Updated: 2024-08-05T07:02:24.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3861 vulnerable 2026-06-08 05:04:33.040382 Details available
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service (application crash or hang) via crafted character sequences in JSON data, aka "JSON Parsing Vulnerability."
Published: 2013-10-09T14:44:00.000Z
Updated: 2024-08-06T16:22:01.320Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3860 vulnerable 2026-06-08 05:04:33.039951 Details available
Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly parse a DTD during XML digital-signature validation, which allows remote attackers to cause a denial of service (application crash or hang) via a crafted signed XML document, aka "Entity Expansion Vulnerability."
Published: 2013-10-09T14:44:00.000Z
Updated: 2024-08-06T16:22:01.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3171 vulnerable 2026-06-08 05:04:30.276728 Details available
The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a partial-trust relationship, aka "Delegate Serialization Vulnerability."
Published: 2013-07-10T01:00:00.000Z
Updated: 2024-08-06T16:00:10.161Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0005 vulnerable 2026-06-08 05:03:01.633712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0161 vulnerable 2026-06-08 05:00:39.732269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0160 vulnerable 2026-06-08 05:00:39.728362 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1271 vulnerable 2026-06-08 04:57:57.452333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0664 vulnerable 2026-06-08 04:56:38.539037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3958 vulnerable 2026-06-08 04:55:18.144011 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3332 vulnerable 2026-06-08 04:55:14.195552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1898 vulnerable 2026-06-08 04:54:10.913887 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2497 vulnerable 2026-06-08 04:51:28.949710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1536 vulnerable 2026-06-08 04:51:23.903551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0091 vulnerable 2026-06-08 04:51:07.632945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0090 vulnerable 2026-06-08 04:51:07.626631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.