CVE-2009-2497

The record

The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP), (2) a crafted Silverlight application, (3) a crafted ASP.NET application, or (4) a crafted .NET Framework application, aka "Microsoft Silverlight and Microsoft .NET Framework CLR Vulnerability."

Affected packages

Related vulnerabilities

• CVE-2026-114125 Storybook is a frontend workshop for building user interface components and pages in… CWE-94
• CVE-2026-113776 virtualenv is a tool for creating isolated virtual python environments. CWE-94
• CVE-2026-112100 A vulnerability was determined in DeepPavlov up to 1.7.0. CWE-94
• CVE-2026-112095 A flaw has been found in SourceCodester Inventory System 1.0. CWE-94
• CVE-2026-112042 A security flaw has been discovered in diem-project diem up to… CWE-94
• CVE-2026-112038 A vulnerability has been found in diem-project diem up to… CWE-94
• CVE-2026-111991 A security vulnerability has been detected in WongKinYiu yolov9 0.1. CWE-94
• CVE-2026-111986 A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. CWE-94