Vulnerability Description
Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | .Net Framework | 2.0 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/84075
- http://www.securitytracker.com/id/1035213
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-03
- http://www.securityfocus.com/bid/84075
- http://www.securitytracker.com/id/1035213
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-03
FAQ
What is CVE-2016-0132?
CVE-2016-0132 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signature...
How severe is CVE-2016-0132?
CVE-2016-0132 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2016-0132?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft .Net Framework.