Microsoft .NET Framework JIT Compiler - Optimization NULL String Remote Code Execution

Author: Brian Mancini
type: remote
platform: windows
port: 
date_added: 2011-03-04 
date_updated: 2015-01-09 
verified: 1 
codes: CVE-2011-1271;OSVDB-72932 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/47834/info

The Microsoft .NET Framework is prone to a remote code-execution vulnerability that affects the Just-In-Time (JIT) compiler optimization on x86 architectures.

Successful exploits may allow an attacker to execute arbitrary code in the context of the browser; this may aid in further attacks.

if ((value == null || value == new string[0]) == false)