CVE-2013-0005: The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3...

Security readout for executives and security teams

CVE-2013-0005 is a denial-of-service flaw in Microsoft’s .NET OData/WCF handling. A remote attacker could send crafted HTTP request values that consume resources and restart the affected service. The main business risk is outage of applications exposing affected OData functionality, not data theft or code execution based on the provided sources. Exposure is most likely on legacy Windows/.NET systems hosting WCF or OData endpoints, especially internet-facing IIS applications or Windows Server 2012 systems using the Management OData IIS Extension. Treat this as a legacy-service availability risk. Prioritize internet-facing or business-critical OData applications first, especially if they still run affected .NET versions or Windows Server 2012 components. Mitigation focus: Apply Microsoft MS13-007 or the applicable superseding Microsoft security update.; Inventory systems running affected .NET Framework versions and OData/WCF services.; Restrict external access to OData endpoints where business access is not required..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.