<< Back
CVE Number Vulnerability Product Severity Date
MS16-035 Security Update for .NET Framework to Address Security Feature Bypass (3141780) Microsoft .NET Important 09-03-2016

Technical Information

Brief overview of the risk:
The security feature bypass exists in a .NET Framework component that does not properly validate certain elements of a signed XML document.

Detailed Information on the risk:

A security feature bypass vulnerability exists in a .NET Framework component that does not properly validate certain elements of a signed XML document. An attacker who successfully exploited the vulnerability could modify the contents of an XML file without invalidating the signature associated with the file. If a .NET application relies on the signature to be non-malicious, the behavior of the application could become unpredictable. In custom applications, the security impact depends on the specific usage scenario.

Further information on this exploit is available at : MS16-035

Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 4.5.2
Microsoft .NET Framework 4.6
Microsoft .NET Framework 3.5

Affected Software

Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 4.5.2
Microsoft .NET Framework 4.6
Microsoft .NET Framework 3.5