(MS11-039) Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2514842)
Data de publicação: 16 junho 2011
Schweregrad: : Crítico
Identificador(es) CVE: : CVE-2011-0664
Data do informe: 16 junho 2011
Descrição
This security update resolves a vulnerability that exists in the following Microsoft applications:
- Microsoft .NET Framework
- Microsoft Silverlight
When successfully exploited, the vulnerability allows remote code execution on the affected machine or server. If the logged on user has limited rights on the machine, the vulnerability's impact may be less than if a logged on user has administrator privileges on the affected machine or server.
Exposição das informações
Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.
Solução
Software infectado e versão:
- Microsoft .NET Framework 3.5 (Windows XP Service Pack 3)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows XP Service Pack 3)
- Microsoft .NET Framework 4.0 (Windows XP Service Pack 3)
- Microsoft .NET Framework 3.5 (Windows XP Professional x64 Edition Service Pack 2)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows XP Professional x64 Edition Service Pack 2)
- Microsoft .NET Framework 4.0 (Windows XP Professional x64 Edition Service Pack 2)
- Microsoft .NET Framework 3.5 (Windows Server 2003 Service Pack 2)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2003 Service Pack 2)
- Microsoft .NET Framework 4.0 (Windows Server 2003 Service Pack 2)
- Microsoft .NET Framework 3.5 (Windows Server 2003 x64 Edition Service Pack 2)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2003 x64 Edition Service Pack 2)
- Microsoft .NET Framework 4.0 (Windows Server 2003 x64 Edition Service Pack 2)
- Microsoft .NET Framework 3.5 (Windows Server 2003 with SP2 for Itanium-based Systems)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2003 with SP2 for Itanium-based Systems)
- Microsoft .NET Framework 4.0 (Windows Server 2003 with SP2 for Itanium-based Systems)
- Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Vista Service Pack 1)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista Service Pack 1)
- Microsoft .NET Framework 4.0 (Windows Vista Service Pack 1)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista Service Pack 2)
- Microsoft .NET Framework 4.0 (Windows Vista Service Pack 2)
- Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Vista x64 Edition Service Pack 1)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista x64 Edition Service Pack 1)
- Microsoft .NET Framework 4.0 (Windows Vista x64 Edition Service Pack 1)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista x64 Edition Service Pack 2)
- Microsoft .NET Framework 4.0 (Windows Vista x64 Edition Service Pack 2)
- Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Server 2008 for 32-bit Systems)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for 32-bit Systems)
- Microsoft .NET Framework 4.0 (Windows Server 2008 for 32-bit Systems)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for 32-bit Systems Service Pack 2)
- Microsoft .NET Framework 4.0 (Windows Server 2008 for 32-bit Systems Service Pack 2)
- Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Server 2008 for x64-based Systems)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for x64-based Systems)
- Microsoft .NET Framework 4.0 (Windows Server 2008 for x64-based Systems)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for x64-based Systems Service Pack 2)
- Microsoft .NET Framework 4.0 (Windows Server 2008 for x64-based Systems Service Pack 2)
- Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Server 2008 for Itanium-based Systems)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for Itanium-based Systems)
- Microsoft .NET Framework 4.0 (Windows Server 2008 for Itanium-based Systems)
- Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
- Microsoft .NET Framework 4.0 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
- Microsoft .NET Framework 3.5.1 (Windows 7 for 32-bit Systems)
- Microsoft .NET Framework 4.0 (Windows 7 for 32-bit Systems)
- Microsoft .NET Framework 3.5.1 (Windows 7 for 32-bit Systems Service Pack 1)
- Microsoft .NET Framework 4.0 (Windows 7 for 32-bit Systems Service Pack 1)
- Microsoft .NET Framework 3.5.1 (Windows 7 for x64-based Systems)
- Microsoft .NET Framework 4.0 (Windows 7 for x64-based Systems)
- Microsoft .NET Framework 3.5.1 (Windows 7 for x64-based Systems Service Pack 1)
- Microsoft .NET Framework 4.0 (Windows 7 for x64-based Systems Service Pack 1)
- Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for x64-based Systems)
- Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for x64-based Systems)
- Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
- Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
- Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for Itanium-based Systems)
- Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for Itanium-based Systems)
- Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
- Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
- Microsoft Silverlight 4 when installed on Mac
- Microsoft Silverlight 4 when installed on all releases of Microsoft Windows clients
- Microsoft Silverlight 4 when installed on all releases of Microsoft Windows servers