CVE-2013-1336: microsoft .net_framework Improper Input Validation

Vulnerability summary

CVE-2013-1336 is a medium (CVSS 5.0) Improper Input Validation vulnerability in microsoft .net_framework. EPSS estimates a 19.26% chance of exploitation in the next 30 days, higher than 97.3% of scored vulnerabilities.

Timeline

1. 15-05-2013
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed XML documents via unspecified vectors that preserve signature validity, aka "XML Digital Signature Spoofing Vulnerability."

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.