CVE:CVE-2011-3415
CNNVD:CNNVD-201112-493
ASP.NET是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统。
Microsoft .NET Framework在表单验证过程中验证返回的URL时存在欺骗漏洞。攻击者可利用该漏洞将用户重定向到恶意站点，然后执行钓鱼攻击，获取用户敏感信息。此漏洞不允许攻击者直接执行代码或提升其用户权限。
solution:Upgrade microsoft windows_7 to a higher version than -,-:sp1,and avoid the version -:sp1; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:r2,*:sp2,-:sp2,r2,and avoid the version *:r2,*:sp2,-:sp2,r2; Upgrade microsoft windows_vista to a higher version than *:sp2,-:sp2,and avoid the version *:sp2,-:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,sp3:unknown,and avoid the version *:sp2,sp3:unknown