MS16-155: Description of the Security and Quality Rollup .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 7 and Windows Server 2008 R2: December 13, 2016

2017-01-07T22:45:31
ID KB3205402
Type mskb
Reporter Microsoft
Modified 2016-12-19T23:37:38

Description

<html><body><p>Resolves vulnerabilities in the .NET Framework that could allow an attacker to access information at rest that should be defended by cryptographic mechanisms. This update fixes the way the Framework handles the key and therefore defends the data. Also includes cumulative .NET security updates and improvements in reliability in the .NET Framework.</p><h2></h2><div class="kb-summary-section section"><br/><a bookmark-id="appliestoproducts" href="#appliestoproducts" managed-link="" target="">View products that this article applies to.</a><span></span><br/></div><h2>Summary</h2><div class="kb-summary-section section">This December 13, 2016, Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 updates for Windows 7 and Windows Server 2008 R2 resolves vulnerabilities in the Microsoft .NET Framework. A security vulnerability exists in the .NET Framework which could allow an attacker to access information at rest that should be defended by cryptographic mechanisms. This update fixes the way the framework handles the key, and therefore defends the data while at rest appropriately. To learn more about this vulnerability, see <a href="https://technet.microsoft.com/library/security/ms16-155" id="kb-link-2" target="_self">Microsoft Security Bulletin MS16-155</a>. This update also includes cumulative .NET security updates and improvements in reliability in the .NET Framework. For more information about reliability improvements included for this configuration, see Knowledge Base article <a href="https://support.microsoft.com/en-us/help/3196686" id="kb-link-3">3196686 </a>.</div><h2>Additional information about this security update</h2><div class="kb-moreinformation-section section">The following article contains additional information about this security and quality rollup as it relates to individual product versions. The article may contain known issue information.<ul class="sbody-free_list"><li><a href="https://support.microsoft.com/en-us/help/3205379" id="kb-link-4">3205379 </a> MS16-155: Description of the Security and Quality Rollup for the .NET Framework 4.6.2 for Windows 7 and Windows Server 2008 R2: December 13, 2016</li><li><a href="https://support.microsoft.com/en-us/help/3210136" id="kb-link-5">3210136 </a> MS16-155: Description of the Security and Quality Rollup for the .NET Framework 4.6 and 4.6.1 for the .NET Framework 4.6 for Windows Vista SP2 and Windows Server 2008 SP2, and the .NET Framework 4.6 and 4.6.1 for Windows 7 SP1 and Windows Server 2008 R2 SP1</li><li><a href="https://support.microsoft.com/en-us/help/3210139" id="kb-link-6">3210139 </a> MS16-155: Description of the Security and Quality Rollup for the .NET Framework 4.5.2 for Windows Vista Service Pack 2, Windows Server 2008 Service Pack 2, Windows 7 Service Pack 1, and Windows Server 2008 R2 Service Pack 2: December 13, 2016</li><li><a href="https://support.microsoft.com/en-us/help/3210131" id="kb-link-7">3210131 </a> MS16-155: Description of the Security and Quality Rollup for the .NET Framework 3.5.1 for Windows 7 and Windows Server 2008 R2: December 13, 2016</li></ul></div><h2></h2><div class="kb-moreinformation-section section"><div class="faq-section" faq-section=""><div class="faq-panel"><div class="faq-panel-heading" faq-panel-heading=""><span class="link-expand-image"><span class="faq-chevron win-icon win-icon-ChevronUpSmall"></span></span><span class="bold btn-link link-expand-text"><span class="bold btn-link">How to obtain help and support for this security update</span></span></div><div class="faq-panel-body" faq-panel-body=""><span><div class="kb-collapsible kb-collapsible-collapsed">Help for installing updates: <a href="https://support.microsoft.com/ph/6527" id="kb-link-8" target="_self">Support for Microsoft Update</a><br/><br/>Security solutions for IT professionals: <a href="https://technet.microsoft.com/security/bb980617.aspx" id="kb-link-9" target="_self">TechNet Security Troubleshooting and Support</a><br/><br/>Help for protecting your Windows-based computer from viruses and malware: <a href="https://support.microsoft.com/contactus/cu_sc_virsec_master" id="kb-link-10" target="_self">Virus Solution and Security Center</a><br/><br/>Local support according to your country: <a href="https://support.microsoft.com/" id="kb-link-11" target="_self">International Support</a></div><br/></span></div></div></div></div><h2></h2><div class="kb-moreinformation-section section"><a class="bookmark" id="appliestoproducts"></a><br/><h3 class="sbody-h3">Applies to</h3>This article applies to the following:<ul class="sbody-free_list"><li>Microsoft .NET Framework 4.6, 4.6.1, or 4.6.2 when used with:<ul class="sbody-free_list"><li>Windows Server 2008 R2 Service Pack 1</li><li>Windows 7 Service Pack 1</li></ul></li><li>Microsoft .NET Framework 4.5.2 when used with:<ul class="sbody-free_list"><li>Windows Server 2008 R2 Service Pack 1</li><li>Windows 7 Service Pack 1</li></ul></li><li>Microsoft .NET Framework 3.5.1 when used with:<ul class="sbody-free_list"><li>Windows Server 2008 R2 Service Pack 1</li><li>Windows 7 Service Pack 1</li></ul></li></ul></div></body></html>