Home / bulletins

MS12-074 - Critical : Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2745030) - Version: 1.1

Posted on 15 November 2012

Critical

Severity Rating: Critical
Revision Note: V1.1 (November 14, 2012): Corrected the aggregate severity rating for Microsoft .NET Framework 4.5 on Windows Server 2012 (Server Core installation) in the Severity table. This is a bulletin change only. The severity rating for this configuration remains unchanged.
Summary: This security update resolves five privately reported vulnerabilities in the .NET Framework. The most severe of these vulnerabilities could allow remote code execution if an attacker convinces the user of a target system to use a malicious proxy auto configuration file and then injects code into the currently running application.

Link

Other versions

• MS12-074 - Version: 1.0
• MS12-074 - Version: 1.1

 

TOP