CVE-2015-1672

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to cause a denial of service (recursion and performance degradation) via crafted encrypted data in an XML document, aka ".NET XML Decryption Denial of Service Vulnerability."

• CWE-310

• http://www.securityfocus.com/bid/74482Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032297Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-048
• http://www.securityfocus.com/bid/74482Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032297Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-048

Published

May 13, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1666Microsoft Internet Explorer 6 through 11 allows remote attac…
• CVE-2015-1667Microsoft Internet Explorer 8 through 11 allows remote attac…
• CVE-2015-1668Microsoft Internet Explorer 10 and 11 allows remote attacker…
• CVE-2015-1669Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-1670The Windows DirectWrite library, as used in Microsoft .NET F…
• CVE-2015-1671The Windows DirectWrite library, as used in Microsoft .NET F…7.8
• CVE-2015-1673The Windows Forms (aka WinForms) libraries in Microsoft .NET…
• CVE-2015-1674The kernel in Microsoft Windows 8, Windows 8.1, Windows Serv…
• CVE-2015-1675Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 …
• CVE-2015-1676The kernel-mode drivers in Microsoft Windows Server 2003 SP2…
• CVE-2015-1677The kernel-mode drivers in Microsoft Windows Server 2003 SP2…
• CVE-2015-1678The kernel-mode drivers in Microsoft Windows Server 2003 SP2…