Make Homepage | Add To Favorites | Print Page | Submit News | Feedback | Contact | 

Your Technical Computer Information Resource!  
     
  Technical Updates @ TACKtech Corp.  

10.26.2011 - MS11-069 - Moderate : Vulnerability in .NET Framework Could Allow Information Disclosure (2567951) - Version: 1.2



View Microsoft related news. Severity Rating: Moderate
Revision Note: V1.2 (October 26, 2011): Corrected Server Core installation applicability for .NET Framework 4 on Windows Server 2008 R2 for x64-based Systems.
Summary: This security update resolves a privately reported vulnerability in Microsoft .NET Framework. The vulnerability could allow information disclosure if a user views a specially crafted Web page using a Web browser that can run XAML Browser Applications (XBAPs). In a Web-based attack scenario, an attacker could host a Web site that contains a Web page that is used to exploit this vulnerability. In addition, compromised Web sites and Web sites that accept or host user-provided content or advertisements could contain specially crafted content that could exploit this vulnerability. In all cases, however, an attacker would have no way to force users to visit these Web sites. Instead, an attacker would have to convince users to visit the Web site, typically by getting them to click a link in an e-mail message or Instant Messenger message that takes users to the attacker’s Web site. This vulnerability could also be used by Windows .NET applications to bypass Code Access Security (CAS) restrictions.

- View Microsoft Security Bulletin MS11-069
- View Microsoft Knowledge Base Article - on: 1.
- Visit Microsoft Corporation

NID: 39840 / Submitted by: The Zilla of Zuron
Categories: Microsoft
Most recent Microsoft related news.
MS16-140 - Important: Security Update for Boot Manager (3193479) - Version: 1.1
MS16-130 - Critical: Security Update for Microsoft Windows (3199172) - Version: 1.1
MS16-134 - Important: Security Update for Common Log File System Driver (3193706) - Version: 1.0
MS16-141 - Critical: Security Update for Adobe Flash Player (3202790) - Version: 1.0
MS16-132 - Critical: Security Update for Microsoft Graphics Component (3199120) - Version: 1.0
View archive of Microsoft related news.

Visit the TACKtech Shop
  Popular Tech News  
  Most Viewed News  
  Top Affiliates  
........