Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary
|
|
|
|
|
|
|
Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free!
|
|
|
|
Become a Partner and License Our Database or Notification Service
|
|
|
|
|
|
|
|
|
|
|
|
|
Microsoft .NET Stack Corruption Error in JIT Compiler Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1025331 |
|
SecurityTracker URL: http://securitytracker.com/id/1025331
|
|
CVE Reference:
CVE-2010-3958
(Links to External Site)
|
Updated: Jun 23 2011
|
Original Entry Date: Apr 12 2011
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
|
Description:
A vulnerability was reported in Microsoft .NET. A remote user can cause arbitrary code to be executed on the target user's system.
A remote user can create a specially crafted .NET application that, when loaded by the target user via a Web browser that can run XAML Browser Applications (XBAPs), will execute arbitrary code on the target system. The code will run with the privileges of the target service.
|
Impact:
A remote user can execute arbitrary code on the target user's system.
|
Solution:
The vendor has issued the following fixes:
Windows XP Service Pack 3, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=ce925e76-cb85-48f6-8c0f-e53fa2b09be6
Windows XP Professional x64 Edition Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=ce925e76-cb85-48f6-8c0f-e53fa2b09be6
Windows Server 2003 Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=ce925e76-cb85-48f6-8c0f-e53fa2b09be6
Windows Server 2003 x64 Edition Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=ce925e76-cb85-48f6-8c0f-e53fa2b09be6
Windows Server 2003 with SP2 for Itanium-based Systems, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=ce925e76-cb85-48f6-8c0f-e53fa2b09be6
Windows Vista Service Pack 1, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=94b6a1b3-e048-437b-a224-2a64b3735bc3
Windows Vista Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=1407aaec-b3e0-404c-b84f-0c8e808614c4
Windows Vista x64 Edition Service Pack 1, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=94b6a1b3-e048-437b-a224-2a64b3735bc3
Windows Vista x64 Edition Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=1407aaec-b3e0-404c-b84f-0c8e808614c4
Windows Server 2008 for 32-bit Systems, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=94b6a1b3-e048-437b-a224-2a64b3735bc3
Windows Server 2008 for 32-bit Systems Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=1407aaec-b3e0-404c-b84f-0c8e808614c4
Windows Server 2008 for x64-based Systems, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=94b6a1b3-e048-437b-a224-2a64b3735bc3
Windows Server 2008 for x64-based Systems Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=1407aaec-b3e0-404c-b84f-0c8e808614c4
Windows Server 2008 for Itanium-based Systems, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=94b6a1b3-e048-437b-a224-2a64b3735bc3
Windows Server 2008 for Itanium-based Systems Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=1407aaec-b3e0-404c-b84f-0c8e808614c4
Windows 7 for 32-bit Systems, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=157aa425-953c-4fc9-ab76-4e65d4be8baa
Windows 7 for 32-bit Systems Service Pack 1, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=8f87b8aa-1a2a-405e-aee0-9247d553756a
Windows 7 for x64-based Systems, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=157aa425-953c-4fc9-ab76-4e65d4be8baa
Windows 7 for x64-based Systems Service Pack 1, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=8f87b8aa-1a2a-405e-aee0-9247d553756a
Windows Server 2008 R2 for x64-based Systems, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=157aa425-953c-4fc9-ab76-4e65d4be8baa
Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=8f87b8aa-1a2a-405e-aee0-9247d553756a
Windows Server 2008 R2 for Itanium-based Systems, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=157aa425-953c-4fc9-ab76-4e65d4be8baa
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=8f87b8aa-1a2a-405e-aee0-9247d553756a
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms11-028.mspx
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms11-028.mspx (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
Windows (2003), Windows (2008), Windows (7), Windows (Vista), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 12 Apr 2011 18:15:03 +0000
Subject: http://www.microsoft.com/technet/security/bulletin/ms11-028.mspx
|
Microsoft Security Bulletin MS11-028 - Critical: Vulnerability in .NET Framework Could Allow Remote Code Execution (2484015)
CVE-2010-3958
[solution_section]
The vendor has issued the following fixes:
Windows XP Service Pack 3, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=ce925e76-cb85-48f6-8c0f-e53fa2b09be6
Windows XP Professional x64 Edition Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=ce925e76-cb85-48f6-8c0f-e53fa2b09be6
Windows Server 2003 Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=ce925e76-cb85-48f6-8c0f-e53fa2b09be6
Windows Server 2003 x64 Edition Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=ce925e76-cb85-48f6-8c0f-e53fa2b09be6
Windows Server 2003 with SP2 for Itanium-based Systems, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=ce925e76-cb85-48f6-8c0f-e53fa2b09be6
Windows Vista Service Pack 1, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=94b6a1b3-e048-437b-a224-2a64b3735bc3
Windows Vista Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=1407aaec-b3e0-404c-b84f-0c8e808614c4
Windows Vista x64 Edition Service Pack 1, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=94b6a1b3-e048-437b-a224-2a64b3735bc3
Windows Vista x64 Edition Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=1407aaec-b3e0-404c-b84f-0c8e808614c4
Windows Server 2008 for 32-bit Systems, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=94b6a1b3-e048-437b-a224-2a64b3735bc3
Windows Server 2008 for 32-bit Systems Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=1407aaec-b3e0-404c-b84f-0c8e808614c4
Windows Server 2008 for x64-based Systems, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=94b6a1b3-e048-437b-a224-2a64b3735bc3
Windows Server 2008 for x64-based Systems Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=1407aaec-b3e0-404c-b84f-0c8e808614c4
Windows Server 2008 for Itanium-based Systems, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=94b6a1b3-e048-437b-a224-2a64b3735bc3
Windows Server 2008 for Itanium-based Systems Service Pack 2, Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=1407aaec-b3e0-404c-b84f-0c8e808614c4
Windows 7 for 32-bit Systems, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=157aa425-953c-4fc9-ab76-4e65d4be8baa
Windows 7 for 32-bit Systems Service Pack 1, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=8f87b8aa-1a2a-405e-aee0-9247d553756a
Windows 7 for x64-based Systems, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=157aa425-953c-4fc9-ab76-4e65d4be8baa
Windows 7 for x64-based Systems Service Pack 1, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=8f87b8aa-1a2a-405e-aee0-9247d553756a
Windows Server 2008 R2 for x64-based Systems, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=157aa425-953c-4fc9-ab76-4e65d4be8baa
Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=8f87b8aa-1a2a-405e-aee0-9247d553756a
Windows Server 2008 R2 for Itanium-based Systems, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=157aa425-953c-4fc9-ab76-4e65d4be8baa
Windows Server 2008 R2 for Itanium-based Systems Service Pack 1, Microsoft .NET Framework 3.5.1:
http://www.microsoft.com/downloads/details.aspx?familyid=8f87b8aa-1a2a-405e-aee0-9247d553756a
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms11-028.mspx
[/solution_section]
[bugno]2484015
[msno]MS11-028
[severity]Critical
|
|
Go to the Top of This SecurityTracker Archive Page
|
