Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mskbMicrosoftKB4095514
HistoryMay 08, 2018 - 7:00 a.m.

Description of the Security Only update for .NET Framework 3.5.1 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4095514)

2018-05-0807:00:00
Microsoft
support.microsoft.com
13

8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

JSON

Description of the Security Only update for .NET Framework 3.5.1 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4095514)

Summary

This update resolves a vulnerability in Microsoft .NET Framework that could cause denial of service when .NET Framework and .NET core components process XML documents incorrectly. An attacker who has successfully exploited this vulnerability could cause a denial of service against a .NET Framework application. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-0765.Additionally, this update resolves a security feature bypass vulnerability in Windows that could allow an attacker to bypass Device Guard. An attacker who successfully exploits this vulnerability could circumvent a User Mode Code Integrity (UMCI) policy on the computer. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-1039. Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Additional information about this security update

For more information about this security update as it relates to Windows 7 SP1 and Windows Server 2008 R2 SP1, see the following article in the Microsoft Knowledge Base:4099637 Security Only update for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 updates for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4099637)

How to obtain and install the update

Method 1: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog.

Method 2: Windows Software Update Services (WSUS)

On your WSUS server, follow these steps:

  1. Click Start, clickAdministrative Tools, and then clickMicrosoft Windows Server Update Services 3.0.
  2. Expand ComputerName, and then clickAction.
  3. Click Import Updates.
  4. WSUS opens a browser window in which you may be prompted to install an ActiveX control. You must install the ActiveX control to continue.
  5. After the control is installed, you see the Microsoft Update Catalog screen. Enter4099637into theSearchbox, and then clickSearch.
  6. Locate the .NET Framework packages that match the operating systems, languages, and processors in your environment. Click Add to add them to your basket.
  7. After you select all the packages that you need, click View Basket.
  8. To import the packages to your WSUS server, click Import.
  9. After the packages are imported, click Close to return to WSUS.
    The updates are now available for installation through WSUS.

Update deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:20180508 Security update deployment information: May 8, 2018

Update removal information

Note We do not recommend that you remove any security update. To remove this update, use thePrograms and Features item in Control Panel.

Update restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement information

This update does not replace any previously released update.
File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows 7 and Windows Server 2008 R2 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

File information

File hash information

File name SHA1 hash SHA256 hash
Windows6.1-KB4095514-ia64.msu DB641DC06A586C1305AAAE622D4818642C2A73C6 76EAFA20FA3967BA239BC92AB9B802228E4C868B54069D7219E46FA1FAF0F7AC
Windows6.1-KB4095514-x64.msu 34FC4390D8839C2390C7DD6FEE369086F516CF6D 7D4E58440CB5C9ADA5099B46AA20F7BD6C1F7696AA9E838EE845347A14E09EC0
Windows6.1-KB4095514-x86.msu 13141B5E2EFEEE420375D6D0C6B3ABC8D8221283 933D652FD8A9E373587E0119B8EEEE5D270597EA5F3C4E8982CE139A515E0102

For all supported ia64-based versions

File name File version File size Date Time
big5.nlp 66,728 22-Jan-2018 19:12
bopomofo.nlp 82,172 22-Jan-2018 19:12
ksc.nlp 116,756 22-Jan-2018 19:12
mscorlib.dll 2.0.50727.8784 4,014,080 27-Mar-2018 13:05
normidna.nlp 59,342 22-Jan-2018 19:12
normnfc.nlp 45,794 22-Jan-2018 19:12
normnfd.nlp 39,284 22-Jan-2018 19:12
normnfkc.nlp 66,384 22-Jan-2018 19:12
normnfkd.nlp 60,294 22-Jan-2018 19:12
prc.nlp 83,748 22-Jan-2018 19:12
prcp.nlp 83,748 22-Jan-2018 19:12
sortkey.nlp 262,148 22-Jan-2018 19:12
sorttbls.nlp 20,320 22-Jan-2018 19:12
xjis.nlp 28,288 22-Jan-2018 19:12
mscordacwks.dll 2.0.50727.8784 3,083,416 27-Mar-2018 13:05
mscorwks.dll 2.0.50727.8784 20,404,888 27-Mar-2018 13:05
sos.dll 2.0.50727.8784 873,608 27-Mar-2018 13:05
system.security.dll 2.0.50727.8784 274,432 27-Mar-2018 13:05
system.security.dll 2.0.50727.8784 274,432 27-Mar-2018 13:05
big5.nlp 66,728 22-Jan-2018 19:12
bopomofo.nlp 82,172 22-Jan-2018 19:12
ksc.nlp 116,756 22-Jan-2018 19:12
mscorlib.dll 2.0.50727.8784 4,554,752 27-Mar-2018 13:05
normidna.nlp 59,342 22-Jan-2018 19:12
normnfc.nlp 45,794 22-Jan-2018 19:12
normnfd.nlp 39,284 22-Jan-2018 19:12
normnfkc.nlp 66,384 22-Jan-2018 19:12
normnfkd.nlp 60,294 22-Jan-2018 19:12
prc.nlp 83,748 22-Jan-2018 19:12
prcp.nlp 83,748 22-Jan-2018 19:12
sortkey.nlp 262,148 22-Jan-2018 19:12
sorttbls.nlp 20,320 22-Jan-2018 19:12
xjis.nlp 28,288 22-Jan-2018 19:12
mscordacwks.dll 2.0.50727.8784 990,360 27-Mar-2018 13:05
mscorwks.dll 2.0.50727.8784 5,946,520 27-Mar-2018 13:05
sos.dll 2.0.50727.8784 389,768 27-Mar-2018 13:05

For all supported x64-based versions

File name File version File size Date Time
big5.nlp 66,728 22-Jan-2018 19:11
bopomofo.nlp 82,172 22-Jan-2018 19:11
ksc.nlp 116,756 22-Jan-2018 19:11
mscorlib.dll 2.0.50727.8784 4,571,136 27-Mar-2018 13:05
normidna.nlp 59,342 22-Jan-2018 19:12
normnfc.nlp 45,794 22-Jan-2018 19:12
normnfd.nlp 39,284 22-Jan-2018 19:12
normnfkc.nlp 66,384 22-Jan-2018 19:12
normnfkd.nlp 60,294 22-Jan-2018 19:12
prc.nlp 83,748 22-Jan-2018 19:12
prcp.nlp 83,748 22-Jan-2018 19:12
sortkey.nlp 262,148 22-Jan-2018 19:12
sorttbls.nlp 20,320 22-Jan-2018 19:12
xjis.nlp 28,288 22-Jan-2018 19:12
mscordacwks.dll 2.0.50727.8784 1,757,336 27-Mar-2018 13:05
mscorwks.dll 2.0.50727.8784 10,006,680 27-Mar-2018 13:05
sos.dll 2.0.50727.8784 486,024 27-Mar-2018 13:05
system.security.dll 2.0.50727.8784 274,432 27-Mar-2018 13:05
system.security.dll 2.0.50727.8784 274,432 27-Mar-2018 13:05
big5.nlp 66,728 22-Jan-2018 19:12
bopomofo.nlp 82,172 22-Jan-2018 19:12
ksc.nlp 116,756 22-Jan-2018 19:12
mscorlib.dll 2.0.50727.8784 4,554,752 27-Mar-2018 13:05
normidna.nlp 59,342 22-Jan-2018 19:12
normnfc.nlp 45,794 22-Jan-2018 19:12
normnfd.nlp 39,284 22-Jan-2018 19:12
normnfkc.nlp 66,384 22-Jan-2018 19:12
normnfkd.nlp 60,294 22-Jan-2018 19:12
prc.nlp 83,748 22-Jan-2018 19:12
prcp.nlp 83,748 22-Jan-2018 19:12
sortkey.nlp 262,148 22-Jan-2018 19:12
sorttbls.nlp 20,320 22-Jan-2018 19:12
xjis.nlp 28,288 22-Jan-2018 19:12
mscordacwks.dll 2.0.50727.8784 990,360 27-Mar-2018 13:05
mscorwks.dll 2.0.50727.8784 5,946,520 27-Mar-2018 13:05
sos.dll 2.0.50727.8784 389,768 27-Mar-2018 13:05

For all supported x86-based versions

File name File version File size Date Time
system.security.dll 2.0.50727.8784 274,432 27-Mar-2018 13:05
big5.nlp 66,728 22-Jan-2018 19:12
bopomofo.nlp 82,172 22-Jan-2018 19:12
ksc.nlp 116,756 22-Jan-2018 19:12
mscorlib.dll 2.0.50727.8784 4,554,752 27-Mar-2018 13:05
normidna.nlp 59,342 22-Jan-2018 19:12
normnfc.nlp 45,794 22-Jan-2018 19:12
normnfd.nlp 39,284 22-Jan-2018 19:12
normnfkc.nlp 66,384 22-Jan-2018 19:12
normnfkd.nlp 60,294 22-Jan-2018 19:12
prc.nlp 83,748 22-Jan-2018 19:12
prcp.nlp 83,748 22-Jan-2018 19:12
sortkey.nlp 262,148 22-Jan-2018 19:12
sorttbls.nlp 20,320 22-Jan-2018 19:12
xjis.nlp 28,288 22-Jan-2018 19:12
mscordacwks.dll 2.0.50727.8784 990,360 27-Mar-2018 13:05
mscorwks.dll 2.0.50727.8784 5,946,520 27-Mar-2018 13:05
sos.dll 2.0.50727.8784 389,768 27-Mar-2018 13:05

How to obtain help and support for this security update

Related

openvas 15
mskb 32
nessus 11
kaspersky 1
osv 4
cvelist 3
github 2
mscve 2
redhatcve 3
cve 3
prion 3
nvd 3
symantec 2
veracode 3
talosblog 1
trendmicroblog 1
openvas
openvas
Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4096494)
2018-05-09 00:00:00
Microsoft .NET Framework Multiple Vulnerabilities (KB4095873)
2018-05-09 00:00:00
Microsoft .NET Framework Multiple Vulnerabilities (KB4095874)
2018-05-09 00:00:00
mskb
mskb
Description of the Security Only update for .NET Framework 3.5 SP1 for Windows 8.1 and Server 2012 R2 (KB 4095515)
2018-05-08 07:00:00
Description of the Security Only update for .NET Framework 4.5.2 for Windows Server 2012 (KB 4095518)
2018-05-08 07:00:00
Description of the Security and Quality Rollup for .NET Framework 2.0 SP2 and 3.0 SP2 for Windows Server 2008 SP2 (KB 4095873)
2018-05-08 07:00:00
nessus
nessus
Security Updates for Microsoft .NET Framework (May 2018)
2018-05-09 00:00:00
Security Update for ASP.NET Core (May 2018)
2018-05-11 00:00:00
Security Update for .NET Core SDK (May 2018)
2018-05-11 00:00:00
kaspersky
kaspersky
KLA11248 Multiple vulnerabilities in Microsoft Developer Tools
2018-05-08 00:00:00
osv
osv
CVE-2018-0765
2018-05-09 19:29:00
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
2018-10-16 19:54:06
CVE-2018-0764
2018-01-10 01:29:00
cvelist
cvelist
CVE-2018-0765
2018-05-09 19:00:00
CVE-2018-1039
2018-05-09 19:00:00
CVE-2018-0764
2018-01-09 00:00:00
github
github
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
2018-10-16 19:54:06
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
2018-10-16 17:34:00
mscve
mscve
.NET Framework Device Guard Security Feature Bypass Vulnerability
2018-05-08 07:00:00
.NET and .NET Core Denial of Service Vulnerability
2018-05-08 07:00:00
redhatcve
redhatcve
CVE-2018-1039
2018-05-10 02:18:37
CVE-2018-0765
2018-05-10 02:18:51
CVE-2018-0764
2018-01-12 04:49:33
cve
cve
CVE-2018-1039
2018-05-09 19:29:01
CVE-2018-0765
2018-05-09 19:29:00
CVE-2018-0764
2018-01-10 01:29:00
prion
prion
Security feature bypass
2018-05-09 19:29:00
Denial of service
2018-05-09 19:29:00
Denial of service
2018-01-10 01:29:00
nvd
nvd
CVE-2018-0765
2018-05-09 19:29:00
CVE-2018-1039
2018-05-09 19:29:01
CVE-2018-0764
2018-01-10 01:29:00
symantec
symantec
Microsoft .NET CVE-2018-0765 Denial Of Service Vulnerability
2018-05-08 00:00:00
Microsoft .NET Framework Device Guard CVE-2018-1039 Local Security Bypass Vulnerability
2018-05-08 00:00:00
veracode
veracode
Denial Of Service (DoS)
2018-07-05 01:40:15
Denial Of Service (DoS)
2018-07-05 02:32:00
Denial Of Service (DoS)
2019-01-15 09:22:46
talosblog
talosblog
Microsoft Patch Tuesday - May 2018
2018-05-08 12:02:00
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 7, 2018
2018-05-11 15:37:20

8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

JSON
Related for KB4095514
openvas15mskb32nessus11kaspersky1osv4cvelist3github2mscve2redhatcve3cve3prion3nvd3symantec2veracode3talosblog1trendmicroblog1