CVE-2013-0005 - The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."

Back Back to CVE browser

HIGH

The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."

Published Jan 9, 2013

7.8

HIGH

CVSS 2.0

EPSS 32.10%

Description

The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, allows remote attackers to cause a denial of service (resource consumption and daemon restart) via crafted values in HTTP requests, aka "Replace Denial of Service Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

http://www.us-cert.gov/cas/techalerts/TA13-008A.html
third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-007
vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16282
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://www.us-cert.gov/cas/techalerts/TA13-008A.html		third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-007		vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16282		vdb-entrysignaturex_refsource_OVAL