Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. MS13-004: Vulnerability in the .NET Framework could allow elevation of privilege: January 8, 2013

MS13-004: Vulnerability in the .NET Framework could allow elevation of privilege: January 8, 2013

Introduction

Microsoft has released security bulletin MS13-004. You can view the complete security bulletin by going to one of the following Microsoft websites:

↑ Back to the top

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security troubleshooting and support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support based on your region and country: International support

↑ Back to the top

More Information

Known issues and additional information about this update

The following articles contain additional information about this update as it relates to individual product versions. The articles may contain specific information about the individual updates, such as a download URL, prerequisites, and command-line switches.

Microsoft .NET Framework 4.5
  • 2742614 MS13-004: Description of the security update for the .NET Framework 4.5 on Windows 8, Windows RT, and Windows Server 2012: January 8, 2013
  • 2742613 MS13-004: Description of the security update for the .NET Framework 4.5 on Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1, Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: January 8, 2013

Microsoft .NET Framework 4
  • 2742595 MS13-004: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: January 8, 2013





    Known issues in security update 2742595:
    • After you install this security update on a system that is running Windows Communication Foundation (WCF) and the Microsoft .NET Framework 4.0, and that is hosted on an Internet Information Services (IIS) web server, you may receive an error message that resembles the following:

      System.NotSupportedException: The SSL settings for the service 'None' does not match those of the IIS 'Ssl, SslNegotiateCert, SslRequireCert'.

Microsoft .NET Framework 3.5.1
  • 2756921 MS13-004: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: January 8, 2013
  • 2756920 MS13-004: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: January 8, 2013




    Known issues in security update 2756920:
    • After you install this security update on a system that is running Windows Communication Foundation (WCF), you may receive an error message that resembles the following:


      System.ServiceModel.Ativation.iis7helper.extendedprotectiondotlessspnnotenabledthrowhelper(system.object)


  • 2742599 MS13-004: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: January 8, 2013
  • 2742598 MS13-004: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2: January 8, 2013

Microsoft .NET Framework 3.5
  • 2756923 MS13-004: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: January 8, 2013
  • 2742616 MS13-004: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: January 8, 2013

Microsoft .NET Framework 3.0
  • 2756919 MS13-004: Description of the security update for the .NET Framework 3.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: January 8, 2013
  • 2756918 MS13-004: Description of the security update for the .NET Framework 3.0 Service Pack 2 on Windows XP and Windows Server 2003: January 8, 2013

Microsoft .NET Framework 2.0
  • 2742601 MS13-004: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: January 8, 2013
  • 2742596 MS13-004: Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows XP and Windows Server 2003: January 8, 2013

Microsoft .NET Framework 1.1
  • 2742597 MS13-004: Description of the security update for the .NET Framework 1.1 Service Pack 1 on Windows XP, Windows Server 2003 x64 Edition, Windows Server 2003 for Itanium Systems, Windows Vista, and Windows Server 2008: January 8, 2013



    Known issues in security update 2742597:
    • In certain situations on computers that are running Windows Vista Service Pack 2 (SP2) or Windows Server 2008 SP2, you may be reoffered this security update, even though the update is already installed correctly. This is a detection issue only, and you do not have to reinstall this security update if it is already installed.
  • 2742604 MS13-004: Description of the security update for the .NET Framework 1.1 Service Pack 1 on x86-based versions of Windows Server 2003 Service Pack 2: January 8, 2013

Microsoft .NET Framework 1.0
  • 2742607 MS13-004: Description of the security update for the .NET Framework 1.0 Service Pack 3 on Windows XP Service Pack 3 Tablet PC Edition and Windows XP Service Pack 3 Media Center Edition: January 8, 2013
File hash information
File nameSHA1 hashSHA256 hash
NDP1.0sp3-KB2742607-X86-Ocm-Chs.exeDC8261697E22A5C82D9D9284A50FAF8DA8DF13281367370E8E88BDD1323A95DB2F41E02037736F22E41B8D725D67A85ECDFA69DD
NDP1.0sp3-KB2742607-X86-Ocm-Cht.exe163477BDB7315658F5F338BB0E300343AF25C54C7D22ACBE69F260BFEA03470982D71132AE0D68A677284E8221F90EDC9C43665D
NDP1.0sp3-KB2742607-X86-Ocm-Deu.exe098312769A7FBC4ACEB0447FA05EB6D0812438A81D9EF4B9CB98F71B5DEE921892873815FDF47326C1FD694CEFD451F5CDCF2529
NDP1.0sp3-KB2742607-X86-Ocm-Enu.exeAB9735D2A8C307A4DA2A55A358DA3D89C72A669F615F36F2A4A4389C9053F921893335614A63B48A002D73F4CE31A81F95678A2E
NDP1.0sp3-KB2742607-X86-Ocm-Esn.exeEB55EC265752F45FE57623D3C499F0175863112F25E39EEBED7330398CE4918684F8AD5040299B2519178E7680007BA0C07EA40F
NDP1.0sp3-KB2742607-X86-Ocm-Fra.exeD860E1E868676FA0C73A669DE8AA1D6B674F98BF184B76E925E2F17E253870E268DAC8F2789401EA13A81B03B28E13FC92251ECA
NDP1.0sp3-KB2742607-X86-Ocm-Ita.exe9CB8A217C2C1B2D97E1229B3D3114B0F280ED82E95AC7853C0B7A42D615289340F61470454D2E6AD97C83991A3F3EC7E11B035F8
NDP1.0sp3-KB2742607-X86-Ocm-Jpn.exe72EDE7BE3C272CA354F7EC18139347245C04C3E02CB30249382A4BEC6520F256FC41A731B63D8BA71F5D0A7A39C2697746FBA89A
NDP1.0sp3-KB2742607-X86-Ocm-Kor.exeCAC1F2154B105C71398FB2AE5E9930EED6CAFEE70E25AE86FC3760CC8C0E75DAB7B9677C85C0B7B62128BF8468701A169343720E
NDP1.0sp3-KB2742607-X86-Ocm-Nld.exe359202657EBECA7E929862C86E5A93C2D2956A9957AE13938FE5810ECD9341CA7C2FE79D5BBD4F8CC58F53E2F37EE6E8C87189E4
NDP1.1sp1-KB2742597-X86.exeEE3ADCFFC623906E6A2CF8F3D16F51CBD069D2E454CB61C8BEFD5E4367035F755BE5CAF5C5183B39DEE6B589B10C59232A839A56
NDP20SP2-KB2742596-IA64.exeABF7BF9910B2F82AD3DE48DD3FE5DC00825F0FFC3F33B6C42033FE2DADE44F069BF876CA454F7EE3E82142754AC5C07B52F8E516
NDP20SP2-KB2742596-x64.exeD6E4A7E72E0524A87D3DE9D3A149AD12F343A60AAF32F1693E6EE151965E058AF19CEE7DF1B499F887626968053B24CC66B093F0
NDP20SP2-KB2742596-x86.exeA0B11AAA133B0A15295BDE2EC77680314F3200CCC515F391A6DA487FDB33A36DFDD61A79A470044DD1BC14AA652A0F8AEAFB6E75
NDP30SP2-KB2756918-x64.exe24139123C6C09A18090978B88CC2C34116B951B6BFD167DA576570AD220AD180B21243D31CC433C2DEF2BAA067F84F2C551B90C5
NDP30SP2-KB2756918-x86.exe0171F9344FF6AEF983E78241B4463190C77D847A913C7D87AC9410F37A22C3536A3F9DD34A286B90019A331BD80C36A85A8224C2
NDP40-KB2742595-IA64.exeF83730AFDAF463DB2B0865E4ED6BC11F47CA1F74762D57DCD3370E0309FDFEE2A9446DE1F35FB00EACD1789ACC953457C9E3B4AC
NDP40-KB2742595-x64.exeACCF0A336E7BA49D629C10FD80B4E03547EA7E3DC09F8D8D67B9377C134DC6DE06BCA1CFF473E78AEC518842847FA0B7461B7574
NDP40-KB2742595-x86.exeD1258E5D0D6E3291F20F7C5EFDF11BE6ED9946E52FA1D5B8E77EA45A4D62E55A9594F5E8B1E773C28BD6EAEFD00F46AE32B11433
NDP45-KB2742613-x64.exe9E71A06C62B022BEF5525155BEC5CA5987535E70AC31F530D37E86C79043AA800E354C413C13491F5D2858B880692D5FEDD5DDE0
NDP45-KB2742613-x86.exe996601AAAB91AABAA6BA950040534DBA63A8E4A4AD4981A7C6FCE661AE07280F120CB6782422E8AC0AFFB1883D93C814666A7EDA
Windows6.0-KB2742601-ia64.msuA4381AF8BF7002A0C25F8FBB27DB19D0F472B1094EDCCD10FFD04200F098EA3079E85950E24D6C3E020128B00E7AF8C27DE52975
Windows6.0-KB2742601-x64.msuD31315A49DB20D1154FB4E6AB7292A31DBF55497FE5AEB8C9A7553E84D9ED7D9D38FCC3A59D91376158AEC4F5FD20AEB615C9EB3
Windows6.0-KB2742601-x86.msu1987DB40D3E645A810ED4E4662C4245B6F7AEB099543D4B4847B19C79733F9508008CA6F779378B8A5FD66189F5288014335A876
Windows6.0-KB2756919-ia64.msu3631CED4126AC53D87C236CC67536FD0A4D467DC97CF67A33E3CBD9B298C8FC44D19867426661463819F684AD91B4B80BEAC157F
Windows6.0-KB2756919-x64.msu885589EA1E8D9512FDCC76167AEFFF688421C2CC8A66579DBE120ADC9C5345341E89A3334D83680F47BA6E16EDC65EF4365089D6
Windows6.0-KB2756919-x86.msuE98876D39EF8D2D8517BA1D0A6463C627F100E6C8AF5C3E915BCE561FFC132C5DC13AC02154A2948A69C6ED88035D199C12CED71
Windows6.1-KB2742598-ia64.msu31115961150BC26F172505E34FFFDD1FC11FF61FF1A3147C84A3117110D3D64C7B6D4D4C64B20390DF970C56C90FCD3D97CDA2AD
Windows6.1-KB2742598-x64.msu7059661AF911E60D8A1EE3ECAFBA3D1BB26E47DA76EFA73C479BA1859F8A28F34B7E40170BF6EA0284F8BB205C0E2CAE0B9874CC
Windows6.1-KB2742598-x86.msuF948684CD25061CD821F95D4C4C9117D1A3DBEACD12F54E07E94461F0892DAB0A6F19C06423AF16088F606F8F803618755B85914
Windows6.1-KB2742599-ia64.msu6C2BE8B1114383563574876AD67660D27E3AD7684B43C5136CF4406F074766AB8C1485E5F00E61751527417CD5CB307DBAD10089
Windows6.1-KB2742599-x64.msuD00E2E3BAFA37096B6A83F9FC0D611AC2241D832984729AD358996A267BB9B317D4272E2B3CDFE46997CA70AB973CC3730F3EF68
Windows6.1-KB2742599-x86.msu4635E7BD952943828ED081F8AA5AF53DFE5919A1D9FE16AD1E71FBCC04AFA1E83ED9A0069C45C34DB8B4B6EAA54EEFB41CCE4F32
Windows6.1-KB2756920-ia64.msu8FD778274FAF79BD0074CBA3FEAE9E635B277608925F8F30B5B2832CAB06CC23F5625615F35D035CBD64D0C0797E63F77676C4FD
Windows6.1-KB2756920-x64.msu5B2D0F4E87D2E26B992F992DEC389783170E0732E4AC3B89AC09DD3D661AB9750D5957A8DA5B0FE1A9EF9707C795785BBF3C4A02
Windows6.1-KB2756920-x86.msu2B3BFB12F0655104B874310C2DCE688E2E708D118C37C8C04854DEAC882AF6DC30DBAE5A994C21D0A2FA8759741584A3609726AB
Windows6.1-KB2756921-ia64.msu223EAF83871009C3A6D6A8C3556A9A3C31920E4A901DA0D51C387DAC4C46B02064BE1BCA46CECF13565E75981EFA3D68BB69AB06
Windows6.1-KB2756921-x64.msu3E73B76BBA39160452E2C3EF8FDF134F9D0615C54E35A5B152D5F4883F47A72A3E73E80EB9021158C748D3E063FA5C3159AA82DC
Windows6.1-KB2756921-x86.msuF502CE7A8F78CB75BDA630955F6E52490D62E591C24B4A4A99A19D13ECF632185139984490C3A3AFC4705514C24327A1CEFA3268
Windows8-RT-KB2742614-arm.msuC4A92529C9316E4EB659018F9C7212C48BA716660041CABFF9AB79725F677F61E5811AE6D5ED2CD7D75679E9AE33DF3ED214340C
Windows8-RT-KB2742614-x64.msu575A9CD9A10E630D07BBADED3E648D05A740BA707FA2C144AC9B16CC2D88E4547B251497C36AE41A70ED5A401A6497603934940C
Windows8-RT-KB2742614-x86.msu7552A39FC25758FAC5415C0CC516EF6C233D5F9E0159C7DB08DDC82E95A002F93F4C8101BB47CF81940BB838C9631B1D5F7F8C51
Windows8-RT-KB2742616-x64.msu74932B4311E1EA99058DD68EA91912F9651894FE0E4CADA534F5990D913984ED85292013F8DA81F86ACFDB299C0920BA3F283F33
Windows8-RT-KB2742616-x86.msu8BE34DB52D85909DF71825F08A23283CC43E5B9A9E9D93B71A004B9F5F13A60621E599736DFF4C0C3DCF237D8A4B96D711282E97
Windows8-RT-KB2756923-x64.msu548B09E94040B34009C23244AB5779131DD1DA220633D5B3EC5415ABA51786DE160FC853F0EF3E904E149DFF4380C06B9DFB8178
Windows8-RT-KB2756923-x86.msu9DFC61816AAE692AF79E88F6A72A948B53AFB95CA17A678FF491909FBB71D87916AB0B3994833844E0F74CA21A1A4F890216F163
WindowsServer2003-KB2742604-x86-CHS.exeC39E834EE99D8864A790F30871AE87C2C567578099995656AC62E98B2F76CD2C85D7F586FB654EA74604148C15872FC799FFFC78
WindowsServer2003-KB2742604-x86-CHT.exe31CF1FD295EACED602F30DF9603147CAC8C62574D70469DB6A5B2E438698B3C4D6B3C86E719E3F574A9A48FA0B1C34F5303494C5
WindowsServer2003-KB2742604-x86-CSY.exe530E05CB8054BD07F5AEEEA92672B86B9B283BBE558F7D6EA52E95123BF963B6538626FB640967A8748B069E91D53139D3F4F6C6
WindowsServer2003-KB2742604-x86-DEU.exe5333456EAE9CB24164813AAA8DE08185C1F18D288DBB2ADC2EEEA8FE594E500AD5ED68831A65C7A27B3630C21462BAC3D33F1262
WindowsServer2003-KB2742604-x86-ENU.exe489EC592CCFB803A789F94D783C0167EDE788966FD17FA239CAC845367137FE2387576DD9A5594A706AE9701EE680F363B161BD8
WindowsServer2003-KB2742604-x86-ESN.exe41B4659C7F06BB76B776EE6C6E6E4D781AC376C90DD236446B110B63131A72908C40FCD5A5BAC9150206FC5B18B3FCD7B8701037
WindowsServer2003-KB2742604-x86-FRA.exe90507722E68ECC31622C0BDE1DD3D0FB74F6305EE00A2513922F97F4D7AB34C341089981B6C6AE15EADA6462B7729DBB31F216ED
WindowsServer2003-KB2742604-x86-HUN.exe6A2E02BA642C5F759A102D18579F0F493F81DBB0A86BAF3C931097100EEE73905B841103FE64215BCF0223A51FFFF3746D298323
WindowsServer2003-KB2742604-x86-ITA.exe1034D99D6FDEC7BBCD6ED02317A82D1DA50EC213CC3D65F17F78DD739F1B49B56B1DF2A8FBDAE861F479FC255A3DA251E6E11B63
WindowsServer2003-KB2742604-x86-JPN.exe668505D2710B6F8D45E6246D6F5BA5BACB45BAE864ED5841D5082937374B2605589495CD676B6A63AFF9629D406BDB94BA4EA7A6
WindowsServer2003-KB2742604-x86-KOR.exe481F6C0EB4326FABC21CDB6613663FEF430A83A8D1651E6DFCE312292D8BF2884B2F5B442BB80F9730D99E441A85F8A128EAE6AF
WindowsServer2003-KB2742604-x86-NLD.exe77C7E9379529CDF6AC9C5D9215A4A12E6F0847205B527E4B6256220C53FDF24648AC1BE0713251B736A251A343BA7494191BFAB1
WindowsServer2003-KB2742604-x86-PLK.exe66BF91E4DE75C8A55E3592091BB2A46CE8D9B67B57C4CE0A0BDF756674B3107CF0C7B92D533673BA02A9659B31A092A40E13D6E9
WindowsServer2003-KB2742604-x86-PTB.exeB109C7B828A1B0037E7786083AC54EC2859452843197830CCE2E07E9736D8D455364C9F118FEF84CF1449549D366C55DD363A5B7
WindowsServer2003-KB2742604-x86-PTG.exeD7EA7A63A18803AB512BDC5F4B8561C3E2950B729579CA402A6357E2C64B45019AB80327C0C2EA18A9FF14A24356DF92E8EF0182
WindowsServer2003-KB2742604-x86-RUS.exeD09876458374207D8346CE0A8666C55AFAC70C84CA781756C8E4058DE1FC07F24DF6BD4697916DADDEE09D33D3F1EA8DBB97FC20
WindowsServer2003-KB2742604-x86-SVE.exe0BA97DD136122037EEE201C120742C6FA8C2F7A1522D945B1CE8E429590E57848D1B502C563877752BCAA3C5CB2B8F7683C27766
WindowsServer2003-KB2742604-x86-TRK.exeF0B57279D2FB87578A9022CE4AF0613334441D3B4DD729A7A229ADBD973CDCFFE807DF0F4568AEB8427C9E7C96E3196B9EFF8AD7

↑ Back to the top

Update replacement information

Update replacement information for each specific update can be found in the Knowledge Base articles that correspond to this update.

↑ Back to the top


Applies to
This article applies to the following:
  • Microsoft .NET Framework 4.5 when used with:
    • Windows 8
    • Windows RT
    • Windows Server 2012
    • Windows 7
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2
    • Windows Server 2008 R2 Service Pack 1
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
  • Microsoft .NET Framework 4 when used with:
    • Windows 7
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2
    • Windows Server 2008 R2 Service Pack 1
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Microsoft Windows XP Service Pack 3
    • Microsoft Windows Server 2003 Service Pack 2
  • Microsoft .NET Framework 3.5.1 when used with:
    • Windows 7
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2
    • Windows Server 2008 R2 Service Pack 1
  • Microsoft .NET Framework 3.5 when used with:
    • Windows 8
    • Windows Server 2012
  • Microsoft .NET Framework 3.0 Service Pack 2 when used with:
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows XP Service Pack 3
    • Windows Server 2003 Service Pack 2
  • Microsoft .NET Framework 2.0 Service Pack 2 when used with:
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Microsoft Windows XP Service Pack 3
    • Microsoft Windows Server 2003 Service Pack 2
  • Microsoft .NET Framework 1.1 Service Pack 1 when used with:
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows Server 2003 Service Pack 2
    • Windows Server 2003 Service Pack 2 x64 Edition
    • Windows Server 2003 Service Pack 2 for Itanium Systems
    • Windows XP Service Pack 3
  • Microsoft .NET Framework 1.0 Service Pack 3 when used with:
    • Windows XP Service Pack 3 Tablet PC Edition
    • Windows XP Service Pack 3 Media Center Edition

↑ Back to the top

Keywords: atdownload, kbbug, kbexpertiseinter, kbfix, kblangall, kbsecreview, kbsecbulletin, kb, kbsecurity, kbsecvulnerability, kbmustloc

↑ Back to the top

Article Info
Article ID : 2769324
Revision : 1
Created on : 1/7/2017
Published on : 2/8/2013
Exists online : False
Views : 68