MS16-039: Description of the security update for the .NET Framework 3.5 in Windows 8.1 and Windows Server 2012 R2: April 12, 2016

MS16-039: Description of the security update for the .NET Framework 3.5 in Windows 8.1 and Windows Server 2012 R2: April 12, 2016 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remo...

Security update 2016-04-12

...

Microsoft Windows Graphics Component CVE-2016-0145 Memory Corruption Vulnerability

Description Microsoft Windows is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft .NET Framework 3.0 SP2...

KLA10786 Code execution vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in .NET Framework can be exploited remotely to execute arbitrary cod...

KLA10788 Multiple vulnerabilities in Microsoft Graphics Component

Multiple serious vulnerabilities have been found in Microsoft Graphics Component as used in multiple Microsoft products. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handli...

MS16-039: Security update for Microsoft Graphics Component: April 12, 2016

Resolves vulnerabilities in Microsoft Windows, Microsoft .NET Framework, Microsoft Office, Skype for Business, and Microsoft Lync. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted document or visits a webpage that contains specially...

MS16-041: Security update for the .NET Framework: April 12, 2016

Resolves vulnerabilities in Microsoft .NET Framework that could cause remote code execution if an attacker with access to the local system executes a malicious application.View products that this article applies to.SummaryThis security update resolves vulnerabilities in the Microsoft .NET...

PT-2016-1690

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold and 1511 Office 2007 SP3 and 2010 SP2 Word Viewer .NET Framework 3.0 SP2, 3.5, and 3.5.1...

PT-2016-1689

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 4.6 through 4.6.1 Description The issue is related to the improper handling of library loading, which can be exploited by a local user to gain privileges via a crafted application. This can lead to a remote co...

CVE-2016-0148: Undefined Security Weakness

Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."...

April 12, 2016 — KB3147458 (OS Build 10586.218)

None None...

Microsoft .NET Framework mscoreei DLL Planting Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft .NET Framework. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page or open a malicious directory or device. The specific flaw...

CVE-2016-0132

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."...

Security feature bypass

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."...

CVE-2016-0132

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5/3.5.1, 4.5.2, 4.6, and 4.6.1 suffer a security feature bypass vulnerability in XML signature validation, allowing remote attackers to spoof signatures by modifying signed XML documents. The issue enables an XML validation bypass across multiple Windo...

CVE-2016-0132

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."...

CVE-2016-0132: Improper Input Validation

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."...

Microsoft .NET XML Validation Security Feature Bypass Vulnerability (3141780)

This host is missing an important security update according to Microsoft Bulletin MS16-035 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2016-1370

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 2.0 SP2 through 4.6.1 Description The issue is related to the mishandling of signature validation for certain elements of XML documents, allowing remote attackers to spoof signatures via a modified document...

Microsoft .NET Framework CVE-2016-0132 Security Bypass Vulnerability

Description Microsoft .NET Framework is prone to a security-bypass vulnerability because it fails to properly validate certain elements of a signed XML document. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further...