Severity: : Critical
  CVE Kennungen: : CVE-2011-0664
  Advisory Date: 16 de czerwca de 2011

  DESCRIPTION

This security update resolves a vulnerability that exists in the following Microsoft applications:

  • Microsoft .NET Framework
  • Microsoft Silverlight

When successfully exploited, the vulnerability allows remote code execution on the affected machine or server. If the logged on user has limited rights on the machine, the vulnerability's impact may be less than if a logged on user has administrator privileges on the affected machine or server.

  INFORMATION EXPOSURE

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION:

  • Microsoft .NET Framework 3.5 (Windows XP Service Pack 3)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows XP Service Pack 3)
  • Microsoft .NET Framework 4.0 (Windows XP Service Pack 3)
  • Microsoft .NET Framework 3.5 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft .NET Framework 3.5 (Windows Server 2003 Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2003 Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Server 2003 Service Pack 2)
  • Microsoft .NET Framework 3.5 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft .NET Framework 3.5 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Vista Service Pack 1)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows Vista Service Pack 1)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Vista Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Vista x64 Edition Service Pack 1)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista x64 Edition Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows Vista x64 Edition Service Pack 1)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Vista x64 Edition Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Vista x64 Edition Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Server 2008 for 32-bit Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for 32-bit Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for 32-bit Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Server 2008 for x64-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for x64-based Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for x64-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Microsoft .NET Framework 2.0 Service Pack 1 and Microsoft .NET Framework 3.5 (Windows Server 2008 for Itanium-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for Itanium-based Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for Itanium-based Systems)
  • Microsoft .NET Framework 2.0 Service Pack 2 and Microsoft .NET Framework 3.5 Service Pack 1 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for 32-bit Systems)
  • Microsoft .NET Framework 4.0 (Windows 7 for 32-bit Systems)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for 32-bit Systems Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows 7 for 32-bit Systems Service Pack 1)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for x64-based Systems)
  • Microsoft .NET Framework 4.0 (Windows 7 for x64-based Systems)
  • Microsoft .NET Framework 3.5.1 (Windows 7 for x64-based Systems Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows 7 for x64-based Systems Service Pack 1)
  • Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for x64-based Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for x64-based Systems)
  • Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for Itanium-based Systems)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for Itanium-based Systems)
  • Microsoft .NET Framework 3.5.1 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
  • Microsoft .NET Framework 4.0 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
  • Microsoft Silverlight 4 when installed on Mac
  • Microsoft Silverlight 4 when installed on all releases of Microsoft Windows clients
  • Microsoft Silverlight 4 when installed on all releases of Microsoft Windows servers