Home / bulletins

MS13-082 - Critical : Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2878890) - Version: 1.1

Posted on 11 October 2013

There is an newer version: MS13-082 - Version: 1.2

Critical

Severity Rating: Critical
Revision Note: V1.1 (October 10, 2013): Bulletin revised to indicate that Server Core installations of Windows Server 2012 are affected by the vulnerability addressed in the 2861194 update. This is an informational change only. There were no changes to the detection logic or the security update files. Customers who have already successfully updated their systems do not need to take any action.
Summary: This security update resolves two privately reported vulnerabilities and one publicly disclosed vulnerability in Microsoft .NET Framework. The most severe of the vulnerabilities could allow remote code execution if a user visits a website containing a specially crafted OpenType font (OTF) file using a browser capable of instantiating XBAP applications.

Link

Other versions

• MS13-082 - Version: 1.0
• MS13-082 - Version: 1.1
• MS13-082 - Version: 1.2

 

TOP