(MS12-034) Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight (2681578)

  Severity: CRITICAL
  CVE Identifier: CVE-2011-3402,CVE-2012-0159,CVE-2012-0162,CVE-2012-0164,CVE-2012-0165,CVE-2012-0167,CVE-2012-0176,CVE-2012-0180,CVE-2012-0181,CVE-2012-1848
  Advisory Date: MAY 09, 2012

  DESCRIPTION

As the title suggests, this bulletin addresses a number of vulnerabilities reported for the following Microsoft products:

  • Microsoft Windows
  • Microsoft Office
  • Microsoft .NET Framework
  • Microsoft Silverlight

This particular bulletin replaces several other bulletins earlier issued by Microsoft. In particular, this bulletin replaces MS11-087, which was implicated in DUQU malware in 2011.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Windows XP Service Pack 3
  • Windows XP Professional x64 Edition Service Pack 2
  • Windows Server 2003 Service Pack 2
  • Windows Server 2003 x64 Edition Service Pack 2
  • Windows Server 2003 with SP2 for Itanium-based Systems
  • Windows Vista Service Pack 2
  • Windows Vista x64 Edition Service Pack 2
  • Windows Server 2008 for 32-bit Systems Service Pack 2
  • Windows Server 2008 for x64-based Systems Service Pack 2
  • Windows Server 2008 for Itanium-based Systems Service Pack 2
  • Windows 7 for 32-bit Systems
  • Windows 7 for 32-bit Systems Service Pack 1
  • Windows 7 for x64-based Systems
  • Windows 7 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for x64-based Systems
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1
  • Windows Server 2008 R2 for Itanium-based Systems
  • Windows Server 2008 R2 for Itanium-based Systems Service Pack 1
  • Microsoft .NET Framework 3.0 Service Pack 2 (Windows XP Service Pack 3)
  • Microsoft .NET Framework 3.0 Service Pack 2 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft .NET Framework 3.0 Service Pack 2 (Windows Server 2003 Service Pack 2)
  • Microsoft .NET Framework 3.0 Service Pack 2 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft .NET Framework 3.0 Service Pack 2 (Windows Vista Service Pack 2)
  • Microsoft .NET Framework 3.0 Service Pack 2 (Windows Vista x64 Edition Service Pack 2)
  • Microsoft .NET Framework 3.0 Service Pack 2 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Microsoft .NET Framework 3.0 Service Pack 2 (Windows Server 2008 for x64-based Systems Service Pack)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for 32-bit Systems)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for 32-bit Systems Service Pack 1)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for x64-based Systems)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for x64-based Systems Service Pack 1)
  • Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for x64-based Systems)
  • Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Microsoft .NET Framework 4 (Windows XP Service Pack 3)
  • Microsoft .NET Framework 4 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft .NET Framework 4 (Windows Server 2003 Service Pack 2)
  • Microsoft .NET Framework 4 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft .NET Framework 4 (Windows Vista Service Pack 2)
  • Microsoft .NET Framework 4 (Windows Vista x64 Edition Service Pack 2)
  • Microsoft .NET Framework 4 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Microsoft .NET Framework 4 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Microsoft .NET Framework 4 (Windows 7 for 32-bit Systems)
  • Microsoft .NET Framework 4 (Windows 7 for 32-bit Systems Service Pack 1)
  • Microsoft .NET Framework 4 (Windows 7 for x64-based Systems)
  • Microsoft .NET Framework 4 (Windows 7 for x64-based Systems Service Pack 1)
  • Microsoft .NET Framework 4 (Windows Server 2008 R2 for x64-based Systems)
  • Microsoft .NET Framework 4 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core Installation)
  • Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core Installation)
  • Windows Server 2008 R2 for x64-based Systems (Server Core Installation)
  • Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core Installation)

Related Malware