CVE-2014-4149
HIGH 9.3EPSS 21.4%
Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly perform TypeFilterLevel checks, which allows remote attackers to execute arbitrary code via crafted data to a .NET Remoting endpoint, aka "TypeFilterLevel Vulnerability."
- CVSS v2.0 NVD
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 21.44% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2014-11-11
- Updated
- 2024-08-06
Proof-of-concept exploits (2)
- parteeksingh005/ExploitRemotingService_Compiled13★ · 2021-01-03
- tyranid/ExploitRemotingService537★ · 2024-07-31
Security advisories
- http://blogs.technet.com/b/srd/archive/2014/11/11/ms14-072-net-remoting-elevation-of-priv…
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-072