CVE-2011-1977

Description

The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information Disclosure Vulnerability."

Related CPE's

amicrosoft.net_framework4.0*******

omicrosoftwindows_vista*sp2x64*****

omicrosoftwindows_server_2008*sp2x32*****

omicrosoftwindows_server_2008r2*itanium*****

omicrosoftwindows_server_2008r2*x64*****

omicrosoftwindows_server_2008-sp2itanium*****

omicrosoftwindows_xp-sp2x64*****

omicrosoftwindows_7-sp1x86*****

omicrosoftwindows_7-*******

omicrosoftwindows_xp*sp3******

References

TA11-221A

US Government Resource

oval:org.mitre.oval:def:12970

MS11-066

CvssV3 impact

Could not find any metrics

CvssV2 impact

Version

2.0

VectorString

AV:N/AC:M/Au:N/C:P/I:N/A:N

AccessVector

NETWORK

AccessComplexity

MEDIUM

Authentication

NONE

ConfidentialityImpact

PARTIAL

IntegrityImpact

NONE

AvailabilityImpact

NONE

BaseScore

4.300000190734863

Created by Yello
About Severity.io