[PCWorks] Microsoft .NET Framework Multiple Vulnerabilities
- From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
- To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
- Date: Wed, 14 Oct 2009 04:26:52 -0500
TITLE:
Microsoft .NET Framework Multiple Vulnerabilities
SECUNIA ADVISORY ID:
SA37006
VERIFY ADVISORY:
http://secunia.com/advisories/37006/
Critical: Highly critical
Impact: System access
Where: From remote
DESCRIPTION:
Some vulnerabilities have been reported in Microsoft .NET
Framework,
which can be exploited by malicious people to compromise a
vulnerable
system.
1) An unspecified error can be exploited to obtain a managed
pointer
to stack memory, which can be exploited to execute arbitrary
code
e.g. via a specially crafted ASP .NET application, or XBAP
(XAML
browser application).
2) An error in the verification of Microsoft .NET verifiable
code can
be exploited to bypass a type equality check and execute
arbitrary
code e.g. via a specially crafted ASP .NET application or XBAP.
3) An error exists in the Microsoft .NET Common Language
Runtime
(CLR) in the handling of interfaces. This can be exploited to
corrupt
memory and execute arbitrary code e.g. via a specially crafted
ASP
.NET application or XBAP.
SOLUTION:
Apply patches.
-- Microsoft Windows 2000 SP4 --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
Microsoft .NET Framework 2.0 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=d4a328b5-5470-46b0-86c7-cfe0e6a3ea01
Microsoft .NET Framework 2.0 Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=491874d4-5eea-4545-9b7d-3861857c862e
-- Windows XP SP2 / SP3 --
Microsoft .NET Framework 1.0 Service Pack 3 (Media Center
Edition
2005 and Tablet PC Edition 2005 only):
http://www.microsoft.com/downloads/details.aspx?familyid=1bc56c26-1c7c-47e3-94f4-37af7e00392c
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET
Framework 3.5:
http://www.microsoft.com/downloads/details.aspx?familyid=d4a328b5-5470-46b0-86c7-cfe0e6a3ea01
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=491874d4-5eea-4545-9b7d-3861857c862e
-- Windows XP Professional x64 Edition SP2 --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET
Framework 3.5:
http://www.microsoft.com/downloads/details.aspx?familyid=d4a328b5-5470-46b0-86c7-cfe0e6a3ea01
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=491874d4-5eea-4545-9b7d-3861857c862e
-- Windows Server 2003 SP2 --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=d1b4a58b-f0b1-4400-a6e6-0255b0513bd1
Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET
Framework 3.5:
http://www.microsoft.com/downloads/details.aspx?familyid=d4a328b5-5470-46b0-86c7-cfe0e6a3ea01
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=491874d4-5eea-4545-9b7d-3861857c862e
-- Windows Server 2003 x64 Edition SP2 --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET
Framework 3.5:
http://www.microsoft.com/downloads/details.aspx?familyid=d4a328b5-5470-46b0-86c7-cfe0e6a3ea01
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=491874d4-5eea-4545-9b7d-3861857c862e
-- Windows Server 2003 with SP2 for Itanium-based Systems --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET
Framework 3.5:
http://www.microsoft.com/downloads/details.aspx?familyid=d4a328b5-5470-46b0-86c7-cfe0e6a3ea01
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=491874d4-5eea-4545-9b7d-3861857c862e
-- Windows Vista (optionally with SP1 and SP2) --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
-- Windows Vista --
Microsoft .NET Framework 2.0:
http://www.microsoft.com/downloads/details.aspx?familyid=6f99521e-86b3-4083-9132-e5ac06d40b63
Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET
Framework 3.5:
http://www.microsoft.com/downloads/details.aspx?familyid=3cf329c6-6d3d-41eb-bb72-8ba241df0882
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=7438eb1e-6e86-4aa1-b1f4-f71a7699d233
-- Windows Vista SP1 --
Microsoft .NET Framework 2.0 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=30e5410d-0942-4964-9037-52330488efda
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=72fe9066-2397-439d-82fb-2b7f9d2bcce8
-- Windows Vista Service Pack 2 --
Microsoft .NET Framework 2.0 Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=614a92ee-0512-4ccc-b6b8-32ebcec8e6a4
-- Windows Vista x64 Edition (optionally with SP1 and SP2) --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
-- Windows Vista x64 Edition --
Microsoft .NET Framework 2.0:
http://www.microsoft.com/downloads/details.aspx?familyid=6f99521e-86b3-4083-9132-e5ac06d40b63
Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET
Framework 3.5:
http://www.microsoft.com/downloads/details.aspx?familyid=3cf329c6-6d3d-41eb-bb72-8ba241df0882
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=7438eb1e-6e86-4aa1-b1f4-f71a7699d233
-- Windows Vista x64 Edition SP1 --
Microsoft .NET Framework 2.0 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=30e5410d-0942-4964-9037-52330488efda
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=72fe9066-2397-439d-82fb-2b7f9d2bcce8
-- Windows Vista x64 Edition Service Pack 2 --
Microsoft .NET Framework 2.0 Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=614a92ee-0512-4ccc-b6b8-32ebcec8e6a4
-- Windows Server 2008 for 32-bit Systems (optionally with
SP2) --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
-- Windows Server 2008 for 32-bit Systems --
Microsoft .NET Framework 2.0 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=30e5410d-0942-4964-9037-52330488efda
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=72fe9066-2397-439d-82fb-2b7f9d2bcce8
-- Windows Server 2008 for 32-bit Systems Service Pack 2 --
Microsoft .NET Framework 2.0 Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=614a92ee-0512-4ccc-b6b8-32ebcec8e6a4
-- Windows Server 2008 for x64-based Systems (optionally with
SP2)
--
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
-- Windows Server 2008 for x64-based Systems --
Microsoft .NET Framework 2.0 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=30e5410d-0942-4964-9037-52330488efda
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=72fe9066-2397-439d-82fb-2b7f9d2bcce8
-- Windows Server 2008 for x64-based Systems SP2 --
Microsoft .NET Framework 2.0 Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=614a92ee-0512-4ccc-b6b8-32ebcec8e6a4
-- Windows Server 2008 for Itanium-based Systems (optionally
with
SP2) --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
-- Windows Server 2008 for Itanium-based Systems --
Microsoft .NET Framework 2.0 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=30e5410d-0942-4964-9037-52330488efda
Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET
Framework 3.5 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=72fe9066-2397-439d-82fb-2b7f9d2bcce8
-- Windows Server 2008 for Itanium-based Systems SP2 --
Microsoft .NET Framework 2.0 Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=614a92ee-0512-4ccc-b6b8-32ebcec8e6a4
-- Windows 7 for 32-bit Systems --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
-- Windows 7 for x64-based Systems --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
-- Windows Server 2008 R2 for x64-based Systems --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
-- Windows Server 2008 R2 for Itanium-based Systems --
Microsoft .NET Framework 1.1 Service Pack 1:
http://www.microsoft.com/downloads/details.aspx?familyid=78ac8b97-8327-4ae1-8bb0-6cf227f3968f
ORIGINAL ADVISORY:
MS09-061 (KB974378, KB953297, KB953300, KB974417, KB953295,
KB953298,
KB974468, KB974292, KB974467, KB974291, KB974469, KB974470):
http://www.microsoft.com/technet/security/bulletin/MS09-061.mspx
=========================
The list's FAQ's can be seen by sending an email to
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.
To unsubscribe, subscribe, set Digest or Vacation to on or off, go to
//www.freelists.org/list/pcworks . You can also send an email to
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line. Your
member list settings can be found at
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks . Once logged in, you have
access to numerous other email options.
The list archives are located at //www.freelists.org/archives/pcworks/ .
All email posted to the list will be placed there in the event anyone needs to
look for previous posts.
-zxdjhu-
Other related posts:
