CVE-2013-1336: The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not prop...

Security readout for executives and security teams

This flaw affected Microsoft .NET Framework’s handling of XML digital signatures. An attacker could alter a signed XML document in a way that still appeared valid, undermining trust in signed data. The biggest concern is business processes that rely on signed XML for integrity or authorization decisions. Exposure is most likely on legacy Windows systems running the listed .NET Framework versions, especially applications that validate or trust signed XML documents. The provided affected-product metadata is incomplete, so inventory should be tied to Microsoft MS13-040 and local package evidence. Address during legacy-platform and application-risk remediation. Urgency rises if signed XML supports financial, identity, legal, or authorization workflows. No active exploitation is shown in the provided sources, but integrity bypass of trusted documents can create material business risk. Mitigation focus: Apply Microsoft’s MS13-040 security update for affected .NET Framework versions.; Inventory systems running .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, or 4.5.; Prioritize applications that consume signed XML for trust, authorization, or transaction integrity..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.