Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns & practices Enterprise Library (aka EntLib) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many (backslash) characters followed by a (double quote), related to a certain regular expression, aka a ReDoS vulnerability.
Weakness
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_library | Microsoft | 3.1 (including) | 3.1 (including) |
| Enterprise_library | Microsoft | 4.0 (including) | 4.0 (including) |
| Enterprise_library | Microsoft | 4.1 (including) | 4.1 (including) |