Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Microsoft security advisory: Insecure ASP.NET site configuration could allow elevation of privilege

Microsoft security advisory: Insecure ASP.NET site configuration could allow elevation of privilege

September 9, 2014 This security update has been re-released for release on Windows Update and contains some updated articles. We recommend that you apply this updated security update.

↑ Back to the top

Introduction

This security update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege on a server system if a user views a specially crafted webpage by using a web browser that can run ASP.NET applications.

↑ Back to the top

Summary

Microsoft has released security advisory 2905247. You can view the complete security advisory by going to the following Microsoft website:

http://technet.microsoft.com/security/advisory/2905247

↑ Back to the top

How to obtain help and support for this update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

↑ Back to the top

More Information

Installation information

Before you apply this update, make sure that you resolve any view state message authentication code (MAC) errors that you may have. For information about how to do this, see Resolving view state message authentication code (MAC) errors in the Microsoft Knowledge Base.

More information about this update

The following articles contain more information about this update as it relates to individual product versions. The articles may contain specific information to the individual updates such as a download URL, prerequisites, and command line switches.

Microsoft .NET Framework 4.5 and the .NET Framework 4.5.1
  • 2894855  Description of the security update for the .NET Framework 4.5 and the .NET Framework 4.5.1 on Windows 8, Windows RT, and Windows Server 2012: December 10, 2013 Updated

  • 2894856 Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: December 10, 2013 Updated

  • 2894854  Description of the security update for the .NET Framework 4.5 and the .NET Framework 4.5.1 on Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1, Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: December 10, 2013 Updated


Microsoft .NET Framework 4
  • 2894842  Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: December 10, 2013 Updated


Microsoft .NET Framework 3.5.1
  • 2894844  Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: December 10, 2013


Microsoft .NET Framework 3.5
  • 2894852 Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: December 10, 2013 Updated

  • 2894851  Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: December 10, 2013


Microsoft .NET Framework 2.0
  • 2894847  Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: December 10, 2013

  • 2894843  Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Server 2003: December 10, 2013


Microsoft .NET Framework 1.1
  • 2894845  Description of the security update for the .NET Framework 1.1 Service Pack 1 on Windows Server 2003 Service Pack 2 32-bit Edition: December 10, 2013


↑ Back to the top

Update replacement information

Update replacement information for each specific update can be found in the Knowledge Base articles that correspond to this update.

↑ Back to the top

File hash information
File nameSHA1 hashSHA256 hash
MSIPatchRegFix-AMD64.exe5011CB29B096FB674A4795EE8FC2F7FDAD33863ABA62C33DD90ECC3C945AE4F52EEEB2FA07D2C53FB975263B483D09D80F02230D
MSIPatchRegFix-IA64.exeCB861EAF1F4CDFFAD5F83604C7250CD9EDD9643361867793FC7556B79E5833CC18F493A5611EDE94E0D944575E89BAA76B223A0D
MSIPatchRegFix-X86.exe94A84B80B8B45A1AC53A0E5D085513DA0F099655C83C5EE1D4FBFF5260A7D984471EAF4C6004431C21B4F661018BDB92CC124290
NDP20SP2-KB2894843-IA64.exe14210062F040B05D7AC5606AD47DB9D3A6017706F9D5AD0A08E0368CB959649BB1AD5B526999E0FDBC61B8EB98D7972CD2AA4B3E
NDP20SP2-KB2894843-x64.exe579AFBD9190E1DD2FE50B8C5576AD4B932121C26B408D323EF2F3D94D1F57C39EB1DC15CF67AF668CFF3CC678A32332980D699AC
NDP20SP2-KB2894843-x86.exe36228A0825744E86A31A0D0D020ADA3B2D0DA9FAA9B45B58AA6B37A339C0B90911DC0944B4C8B668DEA855759E32CB7538A1413F
NDP40-KB2894842-IA64.exe248E1BD29794E50A931946DD70FA6F4360158FE145FD2A721E24C9CC86E1B1AC80D12D338A50ED8E46096AD592E256300A01C19A
NDP40-KB2894842-x64.exeB417314336401EAFAEA20D771E4C37AC3075AC584B4D44F7FDD2D08343BA74C1E98F40E6DAE3653E4B910C05A843932F72D071D8
NDP40-KB2894842-x86.exe10950C90D521C6968EDF267C890DE6DDD0C2B114E57CE083E6A2F30780467648601D97BA7414E87DECFE3696B40115162F26E3AA
NDP45-KB2894849-x64.exeA40B8E5DB56B7082D74AAFDD3CE232A2108C7E6CB26FFCB9458113486DC268791EDE6D057C4057BBB43651C4E78BEF627E8ED136
NDP45-KB2894849-x86.exe9A83CB551D62A73C30732DA2B38BFFDC90B3D75395B2AA9C2609F719C248FCAD45F53B6650A2206C8BFDC9F26B0D9663243073D3
NDP45-KB2894854-x64.exe9ED6490DB0AB643D622089226FFFF898539535D387A2CE7C04C4B2089B710DCF4298A01E5ACC70112C30291764A7CE7A12F7194F
NDP45-KB2894854-x86.exe8340A11457781186566E6CB9D4BEAF6BE5AA75590BA44647620C1813EF1EC11556B5722DA32DADE18C014AC952D6650D643141A6
NDP45-KB2895210-x64.exeE6EE3FFF616938A34E5909AE2224BACCB44559257D6B27AC1A4EF62296AF628EC32FC09B6C67C5A57549EF5A6824DB67ACCA85B4
NDP45-KB2895210-x86.exe031A840ABDE5412785D9947F2B23B90AE34236FE19ACBF86CB8F64DD332BEE3E9745B6162C5238C6BF67EA5628BAF560AB52A436
Windows6.0-KB2894847-ia64.msu4450A143F0A0A1742EDD39B7C19D5BBEB2B618C506B85260FDA72B6F0E72E849FF91B337FB8760740B3683960FFB09DF335118F7
Windows6.0-KB2894847-x64.msu7719EF17783CA4AE687CAB0DCB24D6567B71AA43230D9D7B668EF64FE12246C23E4D4D90DB99D13FAA534F2DA8C45377CBD2DBCA
Windows6.0-KB2894847-x86.msu9D672B6FD6DAA1CA7C20051DE91FEE613F540BDC8CEDF33EA95966E383903E6CB63B3ED60E48317F0F2120972D077201B54CD860
Windows6.0-KB980842-ia64.msu2A2A67B37490C495E23B1EC709BACA49D06F02729494EDBFFE5DF90060C253C6E185DC2EE9739C144BCF1B25C2F42914078752EC
Windows6.0-KB980842-x64.msu56CCB4131E94F0E4740AC65D54603AD9A2F32FDECC84E048D5B9A0F35F9FE981C1F0FCA67261D0C07B026B18B5626DE9ED97C6F1
Windows6.0-KB980842-x86.msuA6FC223B39B42789FF7A319AFEFF86DF2913D187C41C2294AC8CEDE7308711183F8E0FA5BE9208ACBEEF5DB347BE6E0C8AF2E4AA
Windows6.1-KB2894844-ia64.msu4D9F597BBF41BD12AC6303117F57E4AAB198F0E63C872A21600508DAE46CF88C20CFC154132A08512DC9EA972C7592694AC29C66
Windows6.1-KB2894844-x64.msu71B051D4B2EAE12423868E28B0E5B04A9E10C048C6BE08B0D79070DEC45A5BF122142B695261F3AB2D56E4F3265D54B2A607B39B
Windows6.1-KB2894844-x86.msuD628CB41A17B6CEE85C3BDF3E4612219FB7257BAAA6E2E75F19339039763EA68219CEF57EE807CE35B7A2FE158E904BA467047BA
Windows8-RT-KB2894850-x64.msuAA8C10C10488D8C42A8DB91F0EBA8B6F67C05BAC3B62008A3F76C2E9EEF0C776B7D0D076CD9066258803EAB4EDB86B6705DE715B
Windows8-RT-KB2894850-x86.msu86514238227E6DC2186AC9CCE7C4347E295853E0193911A4C1CBDE07635BAE3041E3C725DDF741FE5AB9643ED86A8AFBFAF4FDAC
Windows8-RT-KB2894851-x64.msu4A9252475F4767841B6A4464BBE54E20507851123331943040886414C2E426B0EC8B083FBDD16D2358FBA7B9DB24297CB06C4937
Windows8-RT-KB2894851-x86.msuAB485A340C761CF1B95AA87AA7323E28DAAEF6DE94617995EC5DD8E4D802B3D8B99C203D0B0E9DA9A6033846DBBF517B082565B6
Windows8-RT-KB2894855-x64.msu1E40693415E33C1C5E4D214B700881BD111F528F7C3E0BA87D94F50E3B47710C12A1986C183451645D100A1A7BB02E387D705BF0
Windows8-RT-KB2894855-x86.msu1A590394EF1E3585D3892B8F046723051F7A132C21B3ED345036AE3A39B94012885A38F8B87671197D82B0F552083A20A1164A61
Windows8.1-KB2894852-x64.msu632006854D9C3709180D7C864CABC7D1661F824084DDA0AB9C8C9D546DDAAFB29557DAE762E463C8B381744A74AEC5BCBB15E8F3
Windows8.1-KB2894852-x86.msuB5B52A14663887A6D51E34C4F5743F215CB0D3A677C01599C5C41EA4DDAD7FF951287A817FCEAE94B83EFB71882A76A2743B0C82
Windows8.1-KB2894856-x64.msuA899C1F0AEC9C21703840A618FF535905AC2F0D2B743D7B772444DD94EBC8F8ACD37CB4CC0CA696B9AAE551BA2450FD455B84923
Windows8.1-KB2894856-x86.msuE7ADE88F9C46EA31788DAA0AC7F3A5B539466B47E1E1DFB6C5A38527939B9C61DDB4A0B99E6E24DC41E0D2CC8596C712C8CB9E66
WindowsServer2003-KB2894845-x86-CHS.exe7C60B0C99631644F182E8192143B9A0A13D782223B40C3B4804595975B122D5206C8FC1309D92BD353EBAD0941584EDEBF6C8681
WindowsServer2003-KB2894845-x86-CHT.exeB4F363D59ACBB71A539608B19D78B8F33C7CC107F83F94F549D168B97E626046B6CB9986B04014E91BB5A202C75B302B639F3947
WindowsServer2003-KB2894845-x86-CSY.exeDEBD244429E19FAA66EDB6D54E877D3D8EB2B4C776DF450E1695F6CC859FEACCFCC70166BE951CC7024BE26F525A99B00E553DF6
WindowsServer2003-KB2894845-x86-DEU.exe15ED98B8F252A0DB53D780CD9E1540D1F202BEAB15EA4B791D671211B1ACA1DEAE418B26B84E5D6DD5166CBDB97682BA8C13ED57
WindowsServer2003-KB2894845-x86-ENU.exe045F30403D396ACFFFBCF7E37D60D435548FCC1CC83921E3C15A83C569A5E11955189FF76998EAF333DF9A6B64C979C10B11A940
WindowsServer2003-KB2894845-x86-ESN.exeE34687DA9F43D6526486F75C6D5FA4857FFA66F5238CADA16242B7608E08011B94AC69E3512CDBCD3020F98FC8BC64CEBF56F938
WindowsServer2003-KB2894845-x86-FRA.exeDB566E95EF8577C8356B6CA4820A3165AB438C792A82E5B1FE99BCD43C932B2299D5B2DA6142D2378E1D13648C8C50A7BCFBF708
WindowsServer2003-KB2894845-x86-HUN.exe2AAC63376EAEBEA61CBE9E4EB037EC1ECADF5E61043CD3790BC43FE1C1C920C0F9AE2D75FE4054312D7F09CFFDF19664A821127A
WindowsServer2003-KB2894845-x86-ITA.exeECA206819B6C8F52FE455B377AF16F8986020B29334573222D087440E5A9E2BB25CACE1151D8089DBE907F2B3F450B5B73FCB2F1
WindowsServer2003-KB2894845-x86-JPN.exe97021525FF5867DF5E002A6675E7AA8358C15D6284B88083611541C31ADA2B0F4470E43BF11EF98DC1E60768442CD072CF3E4D1E
WindowsServer2003-KB2894845-x86-KOR.exe999622189582238932B897A333473C2AA51555039034802A24310ECFCB1ABE1A14C479FD21CC66EEAD93EF9BD693BA19AFE09A10
WindowsServer2003-KB2894845-x86-NLD.exeD49A7A3007A830210E9D5D36B63FBA90434D013FBE1A0427BB3C7C357A1003D78AC2594F2B2FA8ACFFBD05565AF65223C75C2A71
WindowsServer2003-KB2894845-x86-PLK.exe05A08E5BA2810F932AB1639FB523CDB72B2CA263B680E1053E19D3D612A7AF1B38C348A30D46DBED6A02398247B297F5ADC9EE2F
WindowsServer2003-KB2894845-x86-PTB.exeE9E2293EAA5A83B4AAA47F4600BAD1E227A8A88F9101CDFA8FBF4CE6BD05B5CFE5746DEBDB235935C304B456C6253D4999AD513F
WindowsServer2003-KB2894845-x86-PTG.exe2DCB03D6A7BDDB4F975EF31E611633578E7C0084D44463C5F370FE9F3865A33D80A8B02069AA565D914E5B3C5898A774CA250A7B
WindowsServer2003-KB2894845-x86-RUS.exeD335C996894948A431C55E0A83B72AE4DF4C6095EE9AB4BD5DF3E09A3530299908E5651BD5BC5C1EF420B23131033BCB2033C441
WindowsServer2003-KB2894845-x86-SVE.exeD5461A2AEA4D89474374C262654E3BF2192A323E28F4C14F94DA7CC06EC1C590A481F184E2076A87610DF9C39E65F303EB4F0D92
WindowsServer2003-KB2894845-x86-TRK.exe7B8AA1A3B6DC52EDA6BCED9E39C04DC58F79DFAF13E1F9DD1A60621057F28EA48BDC7E70D0D4E064412387578AAF783BA15A438C

↑ Back to the top


Applies to

This article applies to the following:
  • Microsoft .NET Framework 4.5.1 when used with:
    • Windows 8.1
    • Windows RT 8.1
    • Windows Server 2012 R2
    • Windows 8
    • Windows RT
    • Windows Server 2012
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
  • Microsoft .NET Framework 4.5 when used with:
    • Windows 8
    • Windows RT
    • Windows Server 2012
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
  • Microsoft .NET Framework 4 when used with:
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows Server 2003 Service Pack 2
  • Microsoft .NET Framework 3.5.1 when used with:
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
  • Microsoft .NET Framework 3.5 when used with:
    • Windows 8
    • Windows Server 2012
  • Microsoft .NET Framework 2.0 Service Pack 2 when used with:
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows Server 2003 Service Pack 2
  • Microsoft .NET Framework 1.1 Service Pack 1 when used with:
    • Windows Server 2003 Service Pack 2 32-bit Edition

↑ Back to the top

Keywords: atdownload, kbbug, kbexpertiseinter, kbfix, kblangall, kbsecurity, kbsecbulletin, kbsecreview, kb, kbsecvulnerability, kbmustloc

↑ Back to the top

Article Info
Article ID : 2905247
Revision : 1
Created on : 1/7/2017
Published on : 9/9/2014
Exists online : False
Views : 295