Security Advisory

CVE-2012-2519

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-11-14 00:00:00
Last updated 2024-08-06 19:34:25
Assigner microsoft
CVSS score not scored
State PUBLISHED

Description

Untrusted search path vulnerability in Entity Framework in ADO.NET in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .NET application, aka ".NET Framework Insecure Library Loading Vulnerability."