Microsoft .NET Framework 2.0 2.0 SP1 and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) (2) a crafted ASP.NET application or (3) a crafted .NET Framework application aka \Microsoft .NET Framework Type Verification Vulnerability.\