MS11-100 - Critical : Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)

	MS11-100 - Critical : Vulnerabilities in .NET...

Severity Rating: Critical
Revision Note: V1.2 (January 17, 2012): Added entry to the update FAQ to announce that the Security updates for the Microsoft .NET Framework 3.5 on Windows 8 Developer Preview and the Microsoft .NET Framework 4.5 on Windows 8 Developer Preview are available from Microsoft Update and Windows Update.
Summary: This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft .NET Framework. The most severe of these vulnerabilities could allow elevation of privilege if an unauthenticated attacker sends a specially crafted web request to the target site. An attacker who successfully exploited this vulnerability could take any action in the context of an existing account on the ASP.NET site, including executing arbitrary commands. In order to exploit this vulnerability, an attacker must be able to register an account on the ASP.NET site, and must know an existing user name.

- View Microsoft Security Bulletin MS11-100
- View Microsoft Knowledge Base Article - on: 1.
- Visit Microsoft Corporation

Posted: January 17, 2012 | By: Wissen Schwamm

Recent Microsoft related news.

MS14-085 - Important: Vulnerability in Microsoft Graphics Component Could Allow Information Disclosure (3013126) - Version: 1.1

MS16-123 - Important: Security Update for Windows Kernel-Mode Drivers (3192892) - Version: 3.0

MS16-087 - Critical: Security Update for Windows Print Spooler Components (3170005) - Version: 2.0

MS16-095 - Critical: Cumulative Security Update for Internet Explorer (3177356) - Version: 3.0

MS16-039 - Critical: Security Update for Microsoft Graphics Component (3148522) - Version: 4.0

+ View more Microsoft related news +

			More Technical Information Than You Can Handle.

MS11-100 - Critical : Vulnerabilities in .NET...