MS11-100: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: December 29, 2011

2011-12-29T00:00:00
ID KB2656351
Type mskb
Reporter Microsoft
Modified 2012-06-11T03:26:03

Description

<html><body><p>Resolves a vulnerability in ASP.NET that could allow information disclosure. An attacker that successfully exploited this vulnerability could read data, such as the view state, which was encrypted by the server.</p><h2>INTRODUCTION</h2><div class="kb-summary-section section">Microsoft has released security bulletin MS11-100. To view the complete security bulletin, visit one of the following Microsoft websites:<br/><ul class="sbody-free_list"><li>Home users:<br/><div class="indent"><a href="http://www.microsoft.com/security/pc-security/bulletins/201112.aspx" id="kb-link-1" target="_self">http://www.microsoft.com/security/pc-security/bulletins/201112.aspx</a></div><span class="text-base">Skip the details</span>: Download the updates for your home computer or laptop from the Microsoft Update website now:<br/><div class="indent"><a href="http://update.microsoft.com/microsoftupdate/" id="kb-link-2" target="_self">http://update.microsoft.com/microsoftupdate/</a></div></li><li>IT professionals:<br/><div class="indent"><a href="http://technet.microsoft.com/security/bulletin/ms11-100" id="kb-link-3" target="_self">http://technet.microsoft.com/security/bulletin/MS11-100</a></div></li></ul><span><h3 class="sbody-h3">How to obtain help and support for this security update</h3> <br/>Help installing updates: <br/><a href="https://support.microsoft.com/ph/6527" id="kb-link-4" target="_self">Support for Microsoft Update</a><br/><br/>Security solutions for IT professionals: <br/><a href="http://technet.microsoft.com/security/bb980617.aspx" id="kb-link-5" target="_self">TechNet Security Troubleshooting and Support</a><br/><br/>Help protect your computer that is running Windows from viruses and malware:<br/><a href="https://support.microsoft.com/contactus/cu_sc_virsec_master" id="kb-link-6" target="_self">Virus Solution and Security Center</a><br/><br/>Local support according to your country: <br/><a href="https://support.microsoft.com/common/international.aspx" id="kb-link-7" target="_self">International Support</a><br/><br/></span></div><h2>More Information</h2><div class="kb-moreinformation-section section"><h4 class="sbody-h4">Download information</h4><span>The following file is available for download from the Microsoft Download Center:<br/></span><br/><br/><span><img alt="Download " class="graphic" src="/library/images/support/kbgraphics/public/en-us/download.gif" title="Download "/><a href="http://go.microsoft.com/fwlink/?linkid=237385 " id="kb-link-9" target="_self">Download the package now.</a></span><br/><br/><span>Release Date: December 29, 2011<br/><br/>For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:<br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/119591" id="kb-link-10">119591 </a> How to obtain Microsoft support files from online services </div>Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.<br/></span><h4 class="sbody-h4">Prerequisites</h4>To install this update, you must have Windows Installer 3.1 or a later version installed on the computer. To obtain the latest version of Windows Installer, visit the following Microsoft website: <br/><div class="indent"><a href="http://go.microsoft.com/fwlink/?linkid=132022" id="kb-link-11" target="_self">Windows Installer 4.5 Redistributable</a></div><h4 class="sbody-h4">Command-line switches for this update</h4>For information about the various command-line switches that are supported by this update, see the following Windows Installer command-line switches document:<br/><div class="indent"><a href="https://support.microsoft.com/EN-US/help/227091" id="kb-link-12">227091 </a> Command-Line Switches for the Microsoft Windows Installer Tool</div>For more information about Windows Installer, visit the following Windows Installer MSDN website:  <div class="indent"><a href="http://msdn.microsoft.com/en-us/library/windows/desktop/cc185688(v=vs.85).aspx" id="kb-link-13" target="_self">Windows Installer MSDN website</a></div><h4 class="sbody-h4">Restart information</h4> This security update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.<br/><h4 class="sbody-h4">Removal information</h4> To remove this security update, use the <strong class="uiterm">Programs and Features</strong> item in Control Panel.<br/><h4 class="sbody-h4">Security update replacement information</h4> This security update replaces the following security update:<br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/2416472" id="kb-link-14">2416472 </a> MS10-070: Description of the security update for the Microsoft .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2</div></div><h2>FILE INFORMATION</h2><div class="kb-summary-section section">The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.<br/><h3 class="sbody-h3">.NET Framework 4 file information</h3><h4 class="sbody-h4">For all supported x86-based versions of Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2</h4><h5 class="sbody-h5 text-subtitle">GDR Service Branch</h5><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">File name</th><th class="sbody-th">File version</th><th class="sbody-th">File size</th><th class="sbody-th">Date</th><th class="sbody-th">Time</th></tr><tr class="sbody-tr"><td class="sbody-td">ServiceModelReg.exe</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">192,792</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">12:36</td></tr><tr class="sbody-tr"><td class="sbody-td">aspnet_wp.exe</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">33,552</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.Extensions.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">1,863,464</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:52</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">5,230,864</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">15,120</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine4.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">496,400</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr></table></div><h5 class="sbody-h5 text-subtitle">LDR Service Branch</h5><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">File name</th><th class="sbody-th">File version</th><th class="sbody-th">File size</th><th class="sbody-th">Date</th><th class="sbody-th">Time</th></tr><tr class="sbody-tr"><td class="sbody-td">ServiceModelReg.exe</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">192,792</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">18:16</td></tr><tr class="sbody-tr"><td class="sbody-td">Setup.exe</td><td class="sbody-td">10.0.30319.547</td><td class="sbody-td">79,112</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:36</td></tr><tr class="sbody-tr"><td class="sbody-td">SetupEngine.dll</td><td class="sbody-td">10.0.30319.547</td><td class="sbody-td">810,256</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:36</td></tr><tr class="sbody-tr"><td class="sbody-td">SetupUi.dll</td><td class="sbody-td">10.0.30319.547</td><td class="sbody-td">296,712</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:36</td></tr><tr class="sbody-tr"><td class="sbody-td">aspnet_wp.exe</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">33,552</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.Extensions.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">1,863,976</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">5,231,888</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">15,120</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine4.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">496,400</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr></table></div><h4 class="sbody-h4">For all supported 64-based versions of Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2</h4><h5 class="sbody-h5 text-subtitle">GDR Service Branch</h5><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">File name</th><th class="sbody-th">File version</th><th class="sbody-th">File size</th><th class="sbody-th">Date</th><th class="sbody-th">Time</th></tr><tr class="sbody-tr"><td class="sbody-td">ServiceModelReg.exe</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">261,912</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">13:47</td></tr><tr class="sbody-tr"><td class="sbody-td">ServiceModelReg.exe</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">192,792</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">12:36</td></tr><tr class="sbody-tr"><td class="sbody-td">aspnet_wp.exe</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">41,744</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">13:18</td></tr><tr class="sbody-tr"><td class="sbody-td">aspnet_wp.exe</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">33,552</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.Extensions.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">1,863,464</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:52</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">5,200,656</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">13:18</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">5,230,864</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">16,656</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">13:18</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">15,120</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine4.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">721,680</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">13:18</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine4.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">496,400</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr></table></div><h5 class="sbody-h5 text-subtitle">LDR Service Branch</h5><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">File name</th><th class="sbody-th">File version</th><th class="sbody-th">File size</th><th class="sbody-th">Date</th><th class="sbody-th">Time</th></tr><tr class="sbody-tr"><td class="sbody-td">ServiceModelReg.exe</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">261,912</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">19:18</td></tr><tr class="sbody-tr"><td class="sbody-td">ServiceModelReg.exe</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">192,792</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">18:16</td></tr><tr class="sbody-tr"><td class="sbody-td">Setup.exe</td><td class="sbody-td">10.0.30319.547</td><td class="sbody-td">79,112</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:36</td></tr><tr class="sbody-tr"><td class="sbody-td">SetupEngine.dll</td><td class="sbody-td">10.0.30319.547</td><td class="sbody-td">810,256</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:36</td></tr><tr class="sbody-tr"><td class="sbody-td">SetupUi.dll</td><td class="sbody-td">10.0.30319.547</td><td class="sbody-td">296,712</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:36</td></tr><tr class="sbody-tr"><td class="sbody-td">aspnet_wp.exe</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">41,744</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">18:52</td></tr><tr class="sbody-tr"><td class="sbody-td">aspnet_wp.exe</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">33,552</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.Extensions.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">1,863,976</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">5,201,168</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">18:52</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">5,231,888</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">16,656</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">18:52</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">15,120</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine4.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">721,680</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">18:52</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine4.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">496,400</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr></table></div><h4 class="sbody-h4">For all supported IA-64-based versions of Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2</h4><h5 class="sbody-h5 text-subtitle">GDR Service Branch</h5><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">File name</th><th class="sbody-th">File version</th><th class="sbody-th">File size</th><th class="sbody-th">Date</th><th class="sbody-th">Time</th></tr><tr class="sbody-tr"><td class="sbody-td">ServiceModelReg.exe</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">545,560</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">15:04</td></tr><tr class="sbody-tr"><td class="sbody-td">ServiceModelReg.exe</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">192,792</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">12:36</td></tr><tr class="sbody-tr"><td class="sbody-td">aspnet_wp.exe</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">81,168</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">14:38</td></tr><tr class="sbody-tr"><td class="sbody-td">aspnet_wp.exe</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">33,552</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.Extensions.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">1,863,464</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:52</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">4,819,728</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">14:38</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">5,230,864</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">26,384</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">14:38</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">15,120</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine4.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">1,341,712</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">14:38</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine4.dll</td><td class="sbody-td">4.0.30319.272</td><td class="sbody-td">496,400</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">11:53</td></tr></table></div><h5 class="sbody-h5 text-subtitle">LDR Service Branch</h5><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">File name</th><th class="sbody-th">File version</th><th class="sbody-th">File size</th><th class="sbody-th">Date</th><th class="sbody-th">Time</th></tr><tr class="sbody-tr"><td class="sbody-td">ServiceModelReg.exe</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">545,560</td><td class="sbody-td">26-Dec-2011</td><td class="sbody-td">06:12</td></tr><tr class="sbody-tr"><td class="sbody-td">ServiceModelReg.exe</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">192,792</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">18:16</td></tr><tr class="sbody-tr"><td class="sbody-td">Setup.exe</td><td class="sbody-td">10.0.30319.547</td><td class="sbody-td">79,112</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:36</td></tr><tr class="sbody-tr"><td class="sbody-td">SetupEngine.dll</td><td class="sbody-td">10.0.30319.547</td><td class="sbody-td">810,256</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:36</td></tr><tr class="sbody-tr"><td class="sbody-td">SetupUi.dll</td><td class="sbody-td">10.0.30319.547</td><td class="sbody-td">296,712</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:36</td></tr><tr class="sbody-tr"><td class="sbody-td">aspnet_wp.exe</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">81,168</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">19:57</td></tr><tr class="sbody-tr"><td class="sbody-td">aspnet_wp.exe</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">33,552</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.Extensions.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">1,863,976</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">4,820,752</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">19:57</td></tr><tr class="sbody-tr"><td class="sbody-td">System.Web.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">5,231,888</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">26,384</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">19:57</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">15,120</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine4.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">1,341,712</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">19:58</td></tr><tr class="sbody-tr"><td class="sbody-td">webengine4.dll</td><td class="sbody-td">4.0.30319.547</td><td class="sbody-td">496,400</td><td class="sbody-td">25-Dec-2011</td><td class="sbody-td">17:38</td></tr></table></div></div></body></html>