CVE-2008-5100

critical Microsoft
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
27.8%
Exploitation probability in 30 days
Top 4% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: November 17, 2008 (6387 days ago)
Last Modified: April 23, 2026
Vendor: Microsoft
Source: NVD

Description

The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs.

CWE

CWE-310

Affected Products

microsoft .net framework

References

🔗 securityreason.com 🔗 www.applicationsecurity.co.il 🔗 www.applicationsecurity.co.il 🔗 www.securityfocus.com 🔗 securityreason.com