GCVE - cpe:2.3:a:microsoft:.net_framework:4.0:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:.net_framework:4.0:-:*:*:*:*:*:*

part: a version: 4.0 update: -

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	.Net Framework (`6989685b-1c13-5505-b0b5-cec5bc25351e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-1671`	vulnerable	2026-06-08 05:06:26.037633	Details available The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability." Published: 2015-05-13T10:00:00.000Z Updated: 2025-10-21T23:56:01.311Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-044 http://www.securitytracker.com/id/1032281 http://www.securityfocus.com/bid/74490	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3128`	vulnerable	2026-06-08 05:04:30.191632	Details available The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitrary code via a crafted OpenType font (OTF) file, aka "OpenType Font Parsing Vulnerability." Published: 2013-10-09T14:44:00.000Z Updated: 2024-08-06T16:00:09.802Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18847 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-082 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-081 http://www.us-cert.gov/ncas/alerts/TA13-288A	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3332`	vulnerable	2026-06-08 04:55:14.196803	Details available Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka "ASP.NET Padding Oracle Vulnerability." Published: 2010-09-22T18:00:00.000Z Updated: 2024-08-07T03:03:18.963Z Open on db.gcve.eu Reference links http://www.ekoparty.org/juliano-rizzo-2010.php https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12365 http://www.vupen.com/english/advisories/2010/2751 http://www.dotnetnuke.com/Community/Blogs/tabid/825/EntryId/2799/Oracle-Padding-Vulnerability-in-ASP-NET.aspx http://weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.