CVE-2016-0132 Information

Description

Microsoft .NET Framework 2.0 SP2 3.0 SP2 3.5 3.5.1 4.5.2 4.6 and 4.6.1 mishandles signature validation for unspecified elements of XML documents which allows remote attackers to spoof signatures via a modified document aka .NET XML Validation Security Feature Bypass.\

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Reference

http://www.securityfocus.com/bid/84075 http://www.securitytracker.com/id/1035213 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-035

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

9.8