Home / bulletins

MS11-100 - Critical : Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420) - Version: 1.6

Posted on 11 July 2012

Critical

Severity Rating: Critical
Revision Note: V1.6 (July 10, 2012): Microsoft revised this bulletin to communicate a minor detection change for KB2657424 for Microsoft .NET Framework 3.5 Service Pack 1 to correct an offering issue. There were no changes to the security update files. Customers who have already successfully updated their systems do not need to take any action.
Summary: This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft .NET Framework. The most severe of these vulnerabilities could allow elevation of privilege if an unauthenticated attacker sends a specially crafted web request to the target site. An attacker who successfully exploited this vulnerability could take any action in the context of an existing account on the ASP.NET site, including executing arbitrary commands. In order to exploit this vulnerability, an attacker must be able to register an account on the ASP.NET site, and must know an existing user name.

Link

Other versions

• MS11-100 - Version: 1.0
• MS11-100 - Version: 1.1
• MS11-100 - Version: 1.2
• MS11-100 - Version: 1.3
• MS11-100 - Version: 1.4
• MS11-100 - Version: 1.5
• MS11-100 - Version: 1.6

 

TOP