SecuritySpace - CVE-2015-2504

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-2504

Description: Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 improperly counts objects before performing an array copy, which allows remote attackers to (1) execute arbitrary code via a crafted XAML browser application (XBAP) or (2) bypass Code Access Security restrictions via a crafted .NET Framework application, aka ".NET Elevation of Privilege Vulnerability."

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-2504
BugTraq ID: 76560
http://www.securityfocus.com/bid/76560
Microsoft Security Bulletin: MS15-101
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-101
http://www.securitytracker.com/id/1033493

CVE ID:	CVE-2015-2504
Description:	Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 improperly counts objects before performing an array copy, which allows remote attackers to (1) execute arbitrary code via a crafted XAML browser application (XBAP) or (2) bypass Code Access Security restrictions via a crafted .NET Framework application, aka ".NET Elevation of Privilege Vulnerability."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2504 BugTraq ID: 76560 http://www.securityfocus.com/bid/76560 Microsoft Security Bulletin: MS15-101 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-101 http://www.securitytracker.com/id/1033493