CVE-2016-0132

Critical

Published: 09/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Microsoft .NET Framework versions 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandle signature validation for unspecified elements of XML documents, allowing remote attackers to spoof signatures via a modified document.

Risk Assessment

This vulnerability may lead to authorization fraud related to XML documents, threatening the integrity of data in applications using .NET Framework.

Recommendation

It is recommended to update to the latest version of .NET Framework to mitigate this vulnerability and implement additional XML signature verification mechanisms.

Original NVD description (English source)

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."