CVE-2014-1806

The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which allows remote attackers to execute arbitrary code via vectors involving malformed objects, aka "TypeFilterLevel Vulnerability."

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

39.59% chance of exploitation in the next 30 days, 99th percentile

Published

2014-05-14

Updated

2024-08-06

Proof-of-concept exploits (2)

• parteeksingh005/ExploitRemotingService_Compiled13★ · 2021-01-03
• tyranid/ExploitRemotingService538★ · 2024-07-31

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/35280

References

• CVE Record
• NVD entry

Related

• CVE-2014-4149
• CVE-2014-1805
• CVE-2014-1812
• CVE-2014-1804
• CVE-2014-1815
• CVE-2014-1803