Posted on Dec 30, 2011, 2:44 am, UTC
Updated on Dec 31, 2011, 1:29 am, UTC

ASP.netMicrosoft has issued to patch the vulnerability that could allow an unauthenticated remote attacker to compromise your system and gain control over it. Here are the download links:

  • Security Update for Microsoft .NET Framework 3.5 Service Pack 1 on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008
  • Security Update for Microsoft .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2
  • Security Update for Microsoft .NET Framework 4
  • Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2
  • Security Update for Microsoft .NET Framework 1.1 Service Pack 1 on Windows Server 2003 Service Pack 2 (32-bit)
  • Security Update for Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2003 and Windows XP
  • Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1
  • Security Update for Microsoft .NET Framework 1.1 Service Pack 1 on Windows XP, Windows Server 2003 (64-bit), Windows Vista, and Windows Server 2008

For more information, you can refer to KB Article: KB2656353.

Security Bulletin: MS11-100
Not that other vendors’web frameworks are also affected!

Vendor Status Date Notified Date Updated
Adobe Unknown 2011-11-01 2011-11-01
Apache Tomcat Affected   2011-12-28
IBM Corporation Unknown 2011-11-01 2011-11-01
Microsoft Corporation Affected 2011-11-01 2011-12-29
Oracle Corporation Unknown 2011-11-01 2011-11-01
Ruby Affected 2011-11-01 2011-12-28
The PHP Group Affected   2011-12-28

For more information, refer http://www.kb.cert.org/vuls/id/903934

Leave a Reply

Find us on Facebook