MS14-057 - Critical: Vulnerabilities in .NET Framework Could Allow Remote Code Execution (3000414)

	MS14-057 - Critical: Vulnerabilities in .NET...

Severity Rating: Critical
Revision Note: V1.1 (December 10, 2014): Bulletin revised to correct update replacement entries for Microsoft .NET Framework 4.5/4.5.1/4.5.2 (update 2972107)
Summary: This security update resolves three privately reported vulnerabilities in Microsoft .NET Framework. The most severe of the vulnerabilities could allow remote code execution if an attacker sends a specially crafted URI request containing international characters to a .NET web application, causing ASP.NET to generate incorrectly constructed URIs. In .NET 4.0 applications, the vulnerable functionality (iriParsing) is disabled by default; for the vulnerability to be exploitable an application has to explicitly enable this functionality. In .NET 4.5 applications, iriParsing is enabled by default and cannot be disabled.

- View Microsoft Security Bulletin MS14-057
- View Microsoft Knowledge Base Article - on: 1.
- Visit Microsoft Corporation

Posted: December 10, 2014 | By: Wissen Schwamm

Recent Microsoft related news.

MS14-085 - Important: Vulnerability in Microsoft Graphics Component Could Allow Information Disclosure (3013126) - Version: 1.1

MS16-123 - Important: Security Update for Windows Kernel-Mode Drivers (3192892) - Version: 3.0

MS16-087 - Critical: Security Update for Windows Print Spooler Components (3170005) - Version: 2.0

MS16-095 - Critical: Cumulative Security Update for Internet Explorer (3177356) - Version: 3.0

MS16-039 - Critical: Security Update for Microsoft Graphics Component (3148522) - Version: 4.0

+ View more Microsoft related news +

			More Technical Information Than You Can Handle.

MS14-057 - Critical: Vulnerabilities in .NET...