CVE-2012-1855

CVE-2012-1855 describes a critical memory access vulnerability in multiple versions of the Microsoft .NET Framework, including 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, affecting various Windows operating systems. This flaw, stemming from improper handling of function pointers (CWE-94), allows remote attackers to execute arbitrary code. With a CVSS score of 9.3, it is a high-severity vulnerability that can be exploited with medium attack complexity over the network, leading to complete compromise of confidentiality, integrity, and availability. Despite its high risk score and EPSS indicating a higher likelihood of exploitation compared to most CVEs, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.