Trend Micro Security

MS12-038：.NET Framework の脆弱性により、リモートでコードが実行される (2706726)

2012年6月13日
  危険度: : 緊急
  CVE識別番号: CVE-2012-1855

  概要

When exploited, a vulnerability in several versions of Microsoft .NET Framework could allow an attacker to execute code remotely. An attacker needs to trick intended victims to access a specially crafted webpage hosting XAML Browser Applications (XBAPs). Logged on users with administrative rights are highly impacted by this vulnerability.

  トレンドマイクロの対策

詳しい情報については以下のサイトをご参照ください。

  影響を受けるソフトウェア

  • Windows XP Service Pack 3 (Microsoft .NET Framework 2.0 Service Pack 2)
  • Windows XP Service Pack 3 (Microsoft .NET Framework 4)
  • Windows XP Professional x64 Edition Service Pack 2 (Microsoft .NET Framework 2.0 Service Pack 2)
  • Windows XP Professional x64 Edition Service Pack 2 (Microsoft .NET Framework 4)
  • Windows Server 2003 Service Pack 2 (Microsoft .NET Framework 2.0 Service Pack 2)
  • Windows Server 2003 Service Pack 2 (Microsoft .NET Framework 4)
  • Windows Server 2003 x64 Edition Service Pack 2 (Microsoft .NET Framework 4)
  • Windows Server 2003 x64 Edition Service Pack 2 (Microsoft .NET Framework 2.0 Service Pack 2)
  • Windows Server 2003 with SP2 for Itanium-based Systems (Microsoft .NET Framework 2.0 Service Pack 2)
  • Windows Server 2003 with SP2 for Itanium-based Systems (Microsoft .NET Framework 4)
  • Windows Vista Service Pack 2 (Microsoft .NET Framework 4)
  • Windows Vista Service Pack 2 (Microsoft .NET Framework 2.0 Service Pack 2)
  • Windows Vista x64 Edition Service Pack 2 (Microsoft .NET Framework 2.0 Service Pack 2)
  • Windows Vista x64 Edition Service Pack 2 (Microsoft .NET Framework 4)
  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Microsoft .NET Framework 4)
  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Microsoft .NET Framework 2.0 Service Pack 2)
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Microsoft .NET Framework 2.0 Service Pack 2)
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Microsoft .NET Framework 4)
  • Windows Server 2008 for Itanium-based Systems Service Pack 2 (Microsoft .NET Framework 4)
  • Windows Server 2008 for Itanium-based Systems Service Pack 2 (Microsoft .NET Framework 2.0 Service Pack 2)
  • Windows 7 for 32-bit Systems (Microsoft .NET Framework 2.0 Service Pack 2)
  • Windows 7 for 32-bit Systems (Microsoft .NET Framework 3.5.1)
  • Windows 7 for 32-bit Systems (Microsoft .NET Framework 4)
  • Windows 7 for 32-bit Systems Service Pack 1 (Microsoft .NET Framework 4)
  • Windows 7 for 32-bit Systems Service Pack 1 (Microsoft .NET Framework 3.5.1)
  • Windows 7 for x64-based Systems (Microsoft .NET Framework 3.5.1)
  • Windows 7 for x64-based Systems (Microsoft .NET Framework 4)
  • Windows 7 for x64-based Systems Service Pack 1 (Microsoft .NET Framework 4)
  • Windows 7 for x64-based Systems Service Pack 1 (Microsoft .NET Framework 3.5.1)
  • Windows Server 2008 R2 for x64-based Systems (Microsoft .NET Framework 3.5.1)
  • Windows Server 2008 R2 for x64-based Systems (Microsoft .NET Framework 4)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Microsoft .NET Framework 4)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Microsoft .NET Framework 3.5.1)
  • Windows Server 2008 R2 for Itanium-based Systems (Microsoft .NET Framework 3.5.1)
  • Windows Server 2008 R2 for Itanium-based Systems (Microsoft .NET Framework 4)
  • Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 (Microsoft .NET Framework 4)
  • Windows Server 2008 R2 for Itanium-based Systems Service Pack 1 (Microsoft .NET Framework 3.5.1)
  • Windows Server 2008 R2 for x64-based Systems Server Core installation (Microsoft .NET Framework 3.5.1)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1Server Core installation (Microsoft .NET Framework 3.5.1)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1Server Core installation (Microsoft .NET Framework 4)