Unrated severityNVD Advisory· Published Feb 12, 2014· Updated Jun 17, 2026
CVE-2014-0295
CVE-2014-0295
Description
VsaVb7rt.dll in Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in February 2014, aka "VSAVB7RT ASLR Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:.net_framework:2.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:.net_framework:3.5.1:*:*:*:*:*:*:*
- (no CPE)range: 2.0 SP2 and 3.5.1
Patches
Vulnerability mechanics
References
6News mentions
0No linked articles in our index yet.