CVE Feed

    Dashboard / CVE / CVE-2010-3332

    CVE-2010-3332

    Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services (IIS), provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State (aka __VIEWSTATE) form data, and possibly forge cookies or read application files, via a padding oracle attack, aka "ASP.NET Padding Oracle Vulnerability."

    Published:Sep 22, 2010
    Last Modified:Apr 11, 2025
    EPS:Sep 22, 2010
    EPSS Score:0.87272
    CVSS Score:6.4

    Affected Products

    Vendor
    Microsoft
    Product
    .net Framework
    Vendor
    Microsoft
    Product
    Internet Information Services

    Exploits

    http://www.mono-project.com/Vulnerabilities#ASP.NET_Padding_Oraclehttp://www.troyhunt.com/2010/09/fear-uncertainty-and-and-padding-oracle.htmlhttp://www.mono-project.com/Vulnerabilities#ASP.NET_Padding_Oraclehttp://www.troyhunt.com/2010/09/fear-uncertainty-and-and-padding-oracle.htmlhttps://www.exploit-db.com/exploits/15213https://github.com/bongbongco/MS10-070https://www.exploit-db.com/exploits/15265https://www.exploit-db.com/exploits/15292

    Related CVEs

    CVE-2026-69522 (CVSS 8.8) — Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.…
    CVE-2026-70354 (CVSS 7.8) — Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.…
    CVE-2026-65810 (CVSS 7.8) — Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.…
    CVE-2026-62886 (CVSS 7.8) — Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.…
    CVE-2026-62872 (CVSS 8.8) — Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.…
    CVE-2026-62897 (CVSS 7) — Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.…
    CVE-2026-50659 (CVSS 6.5) — Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a netwo…
    CVE-2026-50650 (CVSS 7.8) — Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to…
    CVE-2026-50649 (CVSS 7.8) — Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.…
    CVE-2026-50648 (CVSS 7.5) — Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny…

    References

    http://blogs.technet.com/b/srd/archive/2010/09/17/understanding-the-asp-net-vulnerability.aspx
    http://isc.sans.edu/diary.html?storyid=9568
    http://pentonizer.com/general-programming/aspnet-poet-vulnerability-what-else-can-i-do/
    http://secunia.com/advisories/41409
    http://securitytracker.com/id?1024459
    http://threatpost.com/en_us/blogs/new-crypto-attack-affects-millions-aspnet-apps-091310
    http://twitter.com/thaidn/statuses/24832350146
    http://weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx
    http://www.dotnetnuke.com/Community/Blogs/tabid/825/EntryId/2799/Oracle-Padding-Vulnerability-in-ASP-NET.aspx
    http://www.ekoparty.org/juliano-rizzo-2010.php
    http://www.microsoft.com/technet/security/advisory/2416728.mspx
    http://www.mono-project.com/Vulnerabilities#ASP.NET_Padding_Oracle
    http://www.securityfocus.com/bid/43316
    http://www.theinquirer.net/inquirer/news/1732956/security-researchers-destroy-microsoft-aspnet-security
    http://www.troyhunt.com/2010/09/fear-uncertainty-and-and-padding-oracle.html
    http://www.vupen.com/english/advisories/2010/2429
    http://www.vupen.com/english/advisories/2010/2751
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-070
    https://exchange.xforce.ibmcloud.com/vulnerabilities/61898
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12365
    http://blogs.technet.com/b/srd/archive/2010/09/17/understanding-the-asp-net-vulnerability.aspx
    http://isc.sans.edu/diary.html?storyid=9568
    http://pentonizer.com/general-programming/aspnet-poet-vulnerability-what-else-can-i-do/
    http://secunia.com/advisories/41409
    http://securitytracker.com/id?1024459
    http://threatpost.com/en_us/blogs/new-crypto-attack-affects-millions-aspnet-apps-091310
    http://twitter.com/thaidn/statuses/24832350146
    http://weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx
    http://www.dotnetnuke.com/Community/Blogs/tabid/825/EntryId/2799/Oracle-Padding-Vulnerability-in-ASP-NET.aspx
    http://www.ekoparty.org/juliano-rizzo-2010.php
    http://www.microsoft.com/technet/security/advisory/2416728.mspx
    http://www.mono-project.com/Vulnerabilities#ASP.NET_Padding_Oracle
    http://www.securityfocus.com/bid/43316
    http://www.theinquirer.net/inquirer/news/1732956/security-researchers-destroy-microsoft-aspnet-security
    http://www.troyhunt.com/2010/09/fear-uncertainty-and-and-padding-oracle.html
    http://www.vupen.com/english/advisories/2010/2429
    http://www.vupen.com/english/advisories/2010/2751
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-070
    https://exchange.xforce.ibmcloud.com/vulnerabilities/61898
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12365

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High