MS11-039: Vulnerability in the .NET Framework and in Microsoft Silverlight could allow remote code execution: June 14, 2011

2011-06-1400:00:00

Microsoft

support.microsoft.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

<html><body><p>Resolves security vulnerabilities that exist in the .NET Framework and in Microsoft Silverlight that could allow arbitrary code to run when a maliciously modified file is opened.</p><h2>INTRODUCTION</h2><div>Microsoft has released security bulletin MS11-039. To view the complete security bulletin, visit one of the following Microsoft websites: <ul><li>Home users:<br /><div><a href=“http://www.microsoft.com/security/pc-security/bulletins/201106.aspx” target=“_self”>http://www.microsoft.com/security/pc-security/bulletins/201106.aspx</a></div><span>Skip the details</span>: Download the updates for your home computer or laptop from the Microsoft Update website now:<br /><div><a href=“http://update.microsoft.com/microsoftupdate/” target=“_self”>http://update.microsoft.com/microsoftupdate/</a></div></li><li>IT professionals:<br /><div><a href=“http://www.microsoft.com/technet/security/bulletin/ms11-039.mspx” target=“_self”>http://www.microsoft.com/technet/security/bulletin/MS11-039.mspx</a></div></li></ul><span><h3>How to obtain help and support for this security update</h3> <br />Help installing updates: <br /><a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals: <br /><a href=“http://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br />Help protect your computer that is running Windows from viruses and malware:<br /><a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country: <br /><a href=“https://support.microsoft.com/common/international.aspx” target=“_self”>International Support</a><br /><br /></span></div><h2>More Information</h2><div><h3>Known issues and additional information about this security update</h3>The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed under each article link. <ul><li><a href=“https://support.microsoft.com/en-us/help/2478663”>2478663 </a> MS11-039: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: June 14, 2011<br /><br />Known issues in security update 2478663:<ul><li>For more information about installation issues with the Microsoft .NET Framework 4, click the following article numbers to view the articles in the Microsoft Knowledge Base:<div><a href=“https://support.microsoft.com/en-us/help/2197146”>2197146 </a> Updates for the .NET Framework may not have a fully localized setup experience <br /><br /><a href=“https://support.microsoft.com/en-us/help/2431208”>2431208 </a> An update for the Microsoft .NET Framework may fail to install when the Microsoft .NET Framework 4 is installed and a restart is pending <br /><br /><br /><br /><a href=“https://support.microsoft.com/en-us/help/2260913”>2260913 </a> FIX: Updating the .NET Framework may fail and some files in the GAC may be deleted <br /><br /><a href=“https://support.microsoft.com/en-us/help/2263996”>2263996 </a> Patching of Microsoft Framework can fail with Access is denied or File in Use error <br /></div></li></ul></li><li><a href=“https://support.microsoft.com/en-us/help/2478662”>2478662 </a> MS11-039: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and on Windows Server 2008 R2 Service Pack 1: June 14, 2011<br /><br />Known issues in security update 2478662:<ul><li>For more information about installation issues with the Microsoft .NET Framework 3.5.1, click the following article number to view the article in the Microsoft Knowledge Base: <br /><br /><div><a href=“https://support.microsoft.com/en-us/help/2263996”>2263996 </a> Patching of Microsoft Framework can fail with Access is denied or File in Use error </div></li></ul></li><li><a href=“https://support.microsoft.com/en-us/help/2478661”>2478661 </a> MS11-039: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and on Windows Server 2008 R2: June 14, 2011<br /><br />Known issues in security update 2478661:<ul><li>For more information about installation issues with the Microsoft .NET Framework 3.5.1, click the following article number to view the article in the Microsoft Knowledge Base: <br /><br /><div><a href=“https://support.microsoft.com/en-us/help/2263996”>2263996 </a> Patching of Microsoft Framework can fail with Access is denied or File in Use error </div></li></ul></li><li><a href=“https://support.microsoft.com/en-us/help/2478660”>2478660 </a> MS11-039: Description of the security update for the .NET Framework 3.5 Service Pack 1, Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: June 14, 2011<br /><br />Known issues in security update 2478660: <ul><li>For more information about installation issues with the Microsoft .NET Framework 3.5.1, click the following article number to view the article in the Microsoft Knowledge Base: <div><a href=“https://support.microsoft.com/en-us/help/2263996”>2263996 </a> Patching of Microsoft Framework can fail with Access is denied or File in Use error</div></li></ul></li><li><a href=“https://support.microsoft.com/en-us/help/2478659”>2478659 </a> MS11-039: Description of the security update for the .NET Framework 3.5 Service Pack 1 on Windows Vista Service Pack 1 and on Windows Server 2008: June 14, 2011<br /><br />Known issues in security update 2478659: <ul><li>For more information about installation issues with the Microsoft .NET Framework 3.5.1, click the following article number to view the article in the Microsoft Knowledge Base: <div><a href=“https://support.microsoft.com/en-us/help/2263996”>2263996 </a> Patching of Microsoft Framework can fail with Access is denied or File in Use error</div></li></ul></li><li><a href=“https://support.microsoft.com/en-us/help/2478658”>2478658 </a> MS11-039: Description of the security update for the .NET Framework 3.5 Service Pack 1 and .NET Framework 2.0 Service Pack 2 on Windows XP Service Pack 3 and on Windows Server 2003 Service Pack 2: June 14, 2011 <br /><br />Known issues in security update 2478658:<ul><li>For more information about installation issues with the .NET Framework 3.5 SP1 and with the .NET Framework 2.0 SP2, click the following article number to view the article in the Microsoft Knowledge Base:<div><a href=“https://support.microsoft.com/en-us/help/923100”>923100 </a> When you try to install an update for the .NET Framework 1.0, 1.1, 2.0, 3.0, or 3.5, you may receive Windows Update error code “0x643” or Windows Installer error code “1603”<br /><br /><br /><br /><a href=“https://support.microsoft.com/en-us/help/923101”>923101 </a> Error message when you try to install a security update for the .NET Framework 2.0 on a computer that is running Windows Server 2003 x64 Edition: “Error 1324. The folder ‘Program Files’ contains an invalid character”<br /><br /><br /><br /><a href=“https://support.microsoft.com/en-us/help/2197146”>2197146 </a> Updates for the .NET Framework 3.5 Service Pack 1 and the .NET Framework 2.0 Service Pack 2 may cause the Microsoft Knowledge Base article number to appear instead of the full title of the update in the Add or Remove Programs item in Control Panel<br /><br /><a href=“https://support.microsoft.com/en-us/help/2260913”>2260913 </a> FIX: Updating the .NET Framework may fail and some files in the GAC may be deleted <br /><br /><a href=“https://support.microsoft.com/en-us/help/2263996”>2263996 </a> Patching of Microsoft Framework can fail with Access is denied or File in Use error <br /></div></li></ul></li><li><a href=“https://support.microsoft.com/en-us/help/2478656”>2478656 </a> MS11-039: Description of the security update for the .NET Framework 3.5 on Windows XP Service Pack 3 and on Windows Server 2003 Service Pack 2: June 14, 2011 <br /><br />Known issues in security update 2478656:<ul><li>For more information about installation issues with the .NET Framework 3.5 SP1 and with the .NET Framework 2.0 SP2, click the following article number to view the article in the Microsoft Knowledge Base:<div><a href=“https://support.microsoft.com/en-us/help/923100”>923100 </a> When you try to install an update for the .NET Framework 1.0, 1.1, 2.0, 3.0, or 3.5, you may receive Windows Update error code “0x643” or Windows Installer error code “1603”<br /><br /><br /><br /><a href=“https://support.microsoft.com/en-us/help/923101”>923101 </a> Error message when you try to install a security update for the .NET Framework 2.0 on a computer that is running Windows Server 2003 x64 Edition: “Error 1324. The folder ‘Program Files’ contains an invalid character”<br /><br /><br /><br /><a href=“https://support.microsoft.com/en-us/help/2197146”>2197146 </a> Updates for the .NET Framework 3.5 Service Pack 1 and the .NET Framework 2.0 Service Pack 2 may cause the Microsoft Knowledge Base article number to appear instead of the full title of the update in the Add or Remove Programs item in Control Panel<br /><br /><a href=“https://support.microsoft.com/en-us/help/2260913”>2260913 </a> FIX: Updating the .NET Framework may fail and some files in the GAC may be deleted <br /><br /><a href=“https://support.microsoft.com/en-us/help/2263996”>2263996 </a> Patching of Microsoft Framework can fail with Access is denied or File in Use error <br /></div></li></ul></li><li><a href=“https://support.microsoft.com/en-us/help/2478657”>2478657 </a> MS11-039: Description of the security update for the .NET Framework 3.5 on Windows Vista Service Pack 1 and on Windows Server 2008: June 14, 2011<br /><br />Known issues in security update 2478657: <ul><li>For more information about installation issues with the Microsoft .NET Framework 3.5.1, click the following article number to view the article in the Microsoft Knowledge Base: <div><a href=“https://support.microsoft.com/en-us/help/2263996”>2263996 </a> Patching of Microsoft Framework can fail with Access is denied or File in Use error</div></li></ul></li></ul></div></body></html>