CVE-2014-0257 is a critical "Type Traversal Vulnerability" in multiple versions of Microsoft .NET Framework (1.0 SP3 through 4.5.1) that allows remote attackers to execute arbitrary code. This vulnerability stems from the framework's failure to properly determine the safety of method execution. With a CVSS score of 9.3, it is highly severe, indicating a network-based attack with medium complexity, leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA KEV, a Metasploit module (MS14-009) and an ExploitDB entry exist, suggesting exploitability, though there is no evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:microsoft:.net_framework:1.0:sp3:*:*:*:*:*:* | ||
1.1CPE matchmatch criteria | cpe:2.3:a:microsoft:.net_framework:1.1:sp1:*:*:*:*:*:* | ||
2.0CPE matchmatch criteria | cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:* | ||
3.5CPE matchmatch criteria | cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:* | ||
3.5.1CPE matchmatch criteria | cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.