(MS11-039) Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2514842)

Publish date: June 16, 2011
  Severity: CRITICAL
  CVE Identifier: CVE-2011-0664
  Advisory Date: JUN 16, 2011

  DESCRIPTION

This security update resolves a vulnerability that exists in the following Microsoft applications:

  • Microsoft .NET Framework
  • Microsoft Silverlight

When successfully exploited, the vulnerability allows remote code execution on the affected machine or server. If the logged on user has limited rights on the machine, the vulnerability's impact may be less than if a logged on user has administrator privileges on the affected machine or server.

  TREND MICRO PROTECTION INFORMATION

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Microsoft .NET Framework 3.5 (Windows XP Service Pack 3)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows XP Service Pack 3)
  • Microsoft .NET Framework 4.0 (Windows XP Service Pack 3)
  • Microsoft .NET Framework 3.5 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft .NET Framework 3.5 (Windows Server 2003 Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2003 Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Server 2003 Service Pack 2)
  • Microsoft .NET Framework 3.5 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft .NET Framework 3.5 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Vista Service Pack 1)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows Vista Service Pack 1)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Vista Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Vista x64 Edition Service Pack 1)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista x64 Edition Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows Vista x64 Edition Service Pack 1)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista x64 Edition Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Vista x64 Edition Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Server 2008 for 32-bit Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for 32-bit Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for 32-bit Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Server 2008 for x64-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for x64-based Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for x64-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Server 2008 for Itanium-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for Itanium-based Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for Itanium-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for 32-bit Systems)
  • Microsoft .NET Framework 4.0 (Windows 7 for 32-bit Systems)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for 32-bit Systems Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows 7 for 32-bit Systems Service Pack 1)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for x64-based Systems)
  • Microsoft .NET Framework 4.0 (Windows 7 for x64-based Systems)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for x64-based Systems Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows 7 for x64-based Systems Service Pack 1)
  • Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for x64-based Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for x64-based Systems)
  • Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for Itanium-based Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for Itanium-based Systems)
  • Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
  • Microsoft Silverlight 4 when installed on Mac
  • Microsoft Silverlight 4 when installed on all releases of Microsoft Windows clients
  • Microsoft Silverlight 4 when installed on all releases of Microsoft Windows servers

Featured Stories