Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

MS14-053: Vulnerability in the .NET Framework could allow denial of service: September 9, 2014


Introduction

This update resolves a vulnerability in the Microsoft .NET Framework that could allow denial of service if an attacker sends a few specially crafted requests to an affected .NET-enabled website. By default, ASP.NET is not installed when the .NET Framework is installed on any supported edition of Windows. To be affected by the vulnerability, customers must manually install and enable ASP.NET by registering it with Internet Information Services (IIS).

↑ Back to the top


Summary

Microsoft has released security bulletin MS14-053. Learn more about how to obtain the fixes that are included in this security bulletin: 

↑ Back to the top


How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

↑ Back to the top


More Information

More information about this update

The following articles contain additional information about this update as it relates to individual product versions. The articles may contain information that is specific to the individual updates, such as download URLs, prerequisites, and command-line switches. 
The .NET Framework 4.5, the .NET Framework 4.5.1, and the .NET Framework 4.5.2
  • 2977765  MS14-053: Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: September 9, 2014
  • 2977766  MS14-053: Description of the security update for the .NET Framework 4.5, the .NET Framework 4.5.1, and the .NET Framework 4.5.2 for Windows 8, Windows RT, and Windows Server 2012: September 9, 2014
  • 2972216  MS14-053: Description of the security update for the .NET Framework 4.5, the .NET Framework 4.5.1, and the .NET Framework 4.5.2 for Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1: September 9, 2014
The .NET Framework 4
  • 2972215  MS14-053: Description of the security update for the .NET Framework 4 for Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: September 9, 2014
The .NET Framework 3.5.1
  • 2973112  MS14-053: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 9, 2014
  • 2972211  MS14-053: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 9, 2014
The .NET Framework 3.5
  • 2973114  MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: September 9, 2014
  • 2972213  MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: September 9, 2014
  • 2973113  MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: September 9, 2014
  • 2972212  MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: September 9, 2014
The .NET Framework 3.0
  • 2974269  MS14-053: Description of the security update for the .NET Framework 3.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: September 9, 2014
  • 2973115  MS14-053: Description of the security update for the .NET Framework 3.0 Service Pack 2 for Windows Server 2003 Service Pack 2: September 9, 2014
The .NET Framework 2.0
  • 2974268  MS14-053: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: September 9, 2014
  • 2972214  MS14-053: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Server 2003 Service Pack 2: September 9, 2014
The .NET Framework 1.1
  • 2972207  MS14-053: Description of the security update for the .NET Framework 1.1 Service Pack 1 for Windows Server 2003 Service Pack 2: September 9, 2014

↑ Back to the top


Update replacement information

Update replacement information for each specific update is available in the Microsoft Knowledge Base articles that correspond to this update.

↑ Back to the top


File hash information
File nameSHA1 hashSHA256 hash
WindowsServer2003-KB2972207-x86-ENU.exe33BE765B1A232875D327A79834A1C24E46B54745B38ED8B4960CEFEC6863C3ABB079BF96831AA572504AF5FB6EDFB671B20F4478
WindowsServer2003-KB2972207-x86-CSY.exe1F25A4497CAA29E82B7F93D90A8BA17B6A0F233F7E67E395DFC6A86C81C799CC7FCA44B57C2B1B74F11496C3417063414AF4BBB5
WindowsServer2003-KB2972207-x86-ITA.exeD5CBFF29878FC957EAE4B256F167918417A88E2D8E2D3907C2E47A8B406A653763AD34DF49347568AB13CB810754B665A8F823BC
WindowsServer2003-KB2972207-x86-JPN.exe4675CF4DE607DAA7E33473EFB6E0FC8CCF95CFFE5D0544185DF05D1BE0884071D631BA8D731B3A6C89746F6712BC70EFD6647E26
WindowsServer2003-KB2972207-x86-KOR.exeE1B4361E12A92992D3886309AC3648831E5B68885B9EEE60E9308CA511C6966A4A916B0E18CC2702767EF7DDADB6D31C32792010
WindowsServer2003-KB2972207-x86-PLK.exe32B54437CC6B0DE87F4DC4533AC3B9F9401D1C3150397C764946CB6F53F4C79D8DB28314D889AC715BB36B2E224356BCB4B6EC5A
WindowsServer2003-KB2972207-x86-NLD.exeBB32E4AB293D32208635CC0BB9DFFDB3B7A8560A9699FAF9654AD554877B88FAA53A62E55F53E0111700246DD2413C991FF2CD44
WindowsServer2003-KB2972207-x86-PTG.exeC4580D1A146F572E7857018E4298A9990CDB974094CEF12E2A633BC4FD15D390D72498C7229C7B25B512014BD588AAD4AA20BCA6
WindowsServer2003-KB2972207-x86-RUS.exe64AFAFBCE906D91F6590DFF3D86BEDB8627E1F55BB3502F753E686EB7360A9D33D69BC2895EA029F30DEA753C77C56599F2563B2
WindowsServer2003-KB2972207-x86-SVE.exe45EB4801A83F5AC3727C71F86A08BFA4E4EC2715AEF5D6822DC718E9574CC82F7C089FD86531ECE173F48C47C60CF79B81E956F6
WindowsServer2003-KB2972207-x86-TRK.exe472C95D7E28CEF7A0704724C0DEDA9BA29E1FF0AE24AFD67502CB5757850D0755AD5824936DF7D3D9200177E7C4A21A23700BDB6
WindowsServer2003-KB2972207-x86-CHS.exe34CDE03EE16057673B89196585AB13F155742B639C54B18566EEC41BE19410FEF8AF366991FE4C0DE79F813BC0F9094E0EAD4CBB
WindowsServer2003-KB2972207-x86-DEU.exeC7F71B42FE0153E88F433C44FB82021EB7FBD2D314064F0FD7208470ED6650D496FDFEE8930744331AA5B2F27B7CBB262B4FAC42
WindowsServer2003-KB2972207-x86-FRA.exe09E7DD707AD91D01DEB9DAF9EEEDA0285035F57F8A8721629E893AAB3349B995B90C0F5C10359ADB779D53A6CA795DFAF3F42972
WindowsServer2003-KB2972207-x86-HUN.exe8586DE439F104796026A4A80B0D02F268F60C2390242752EEDEBF66266E5D4ADE2F6B5EFDE3BBCECEDED13574FE3CF671FA8B7FA
WindowsServer2003-KB2972207-x86-PTB.exeCC9F4110CD6A5E96013C0D1F443A32346DCB8BBAD2561BB6E23BEA986B888062C08CC549A0125F9C427BA2C1315F34A48D1CBE7D
WindowsServer2003-KB2972207-x86-CHT.exe93673CEA321E3995260B1867881141638AC197D4597ED35521D1C41B3DF2E3C6DC0DE9B16DE48F1E3F142861857DF895DB1579CA
WindowsServer2003-KB2972207-x86-ESN.exe2292207334A7F27E02EDBE334B8411B54FE460DDE06E06869DE3363A3799947E4B1D3E9425B0B6FABED326839B2CEA76D304ACC7
Windows6.1-KB2972211-x86.msu2DC8F44A2BEA3611634544B52282718B1E0E88D14C2FD47866C0A3FD6F653D4BC0D211AEE06BAD808C586DC0B37874A746C0F7EB
Windows6.1-KB2972211-x64.msuF02FD113422CF07062028A211AE87ADCE10DC4CFA00F3F145B3DE825081D475191DFC908D20804F54A252345D994D57712B22EA9
Windows6.1-KB2972211-ia64.msu980C17FCD18B7CF118275B5C2AFFB91B4FE089FBB7969F34FDDFC42488410680097129716E344714CB41D36E794F24484D8E9422
Windows8-RT-KB2972212-x64.msuBC85F27F7D610EB12017D4578C6FE2917DA7E50B62414ED51E51C85D600C458222918887648EF2255B6F7EA3FA92A6C7BE034892
Windows8-RT-KB2972212-x86.msuAD877607D271392CB8334D31A7FB5716E904C3713121FB0B22FA5F1A60FF79BE4A4256819D41FD97241C215E2F8F0AA7DF986D16
Windows8.1-KB2972213-x64.msu260158FB1A88EC6917988FCF85230D90784CE6D26EBDFB9B09DBB3731EC782322A0F8525CDC1DE86FB25920BF0843972988836DB
Windows8.1-KB2972213-x86.msu9040506DFD77109DE84A91A9419CDEB3D5BA473D4A6A448BB302E79B5FEFB4BCA22E8F1E8DB10BF2CD77FA7E57A9EC6A86847F89
Windows8.1-KB2972213-x86.msu9040506DFD77109DE84A91A9419CDEB3D5BA473D4A6A448BB302E79B5FEFB4BCA22E8F1E8DB10BF2CD77FA7E57A9EC6A86847F89
Windows8.1-KB2972213-x64.msu260158FB1A88EC6917988FCF85230D90784CE6D26EBDFB9B09DBB3731EC782322A0F8525CDC1DE86FB25920BF0843972988836DB
NDP20SP2-KB2972214-x86.exe40AB25AE56614A531EEA1709ED4B8DC4E0EB1DC6961A2CFA278F2D44D87DCCCB81B1812B1FC8BDF559BC56286ABAFBDC79A8CCAF
NDP20SP2-KB2972214-IA64.exe18D4AB7A72EB49FF3ACA77949289CBA5C9C7D709F32FC92C87C1EAC8668B6540374069F2910D4274E094F6BAA0F9DC294326AE5D
MSIPatchRegFix-X86.exe94A84B80B8B45A1AC53A0E5D085513DA0F099655C83C5EE1D4FBFF5260A7D984471EAF4C6004431C21B4F661018BDB92CC124290
MSIPatchRegFix-AMD64.exe5011CB29B096FB674A4795EE8FC2F7FDAD33863ABA62C33DD90ECC3C945AE4F52EEEB2FA07D2C53FB975263B483D09D80F02230D
MSIPatchRegFix-IA64.exeCB861EAF1F4CDFFAD5F83604C7250CD9EDD9643361867793FC7556B79E5833CC18F493A5611EDE94E0D944575E89BAA76B223A0D
NDP20SP2-KB2972214-x64.exeC6D335C0D74FD6931C3BA47160F5D48B2E818BF434A9ABEE4E0599D4876DEA9FAF152FA2CC36CD30DBC8838D0903F0002AB492E4
NDP40-KB2972215-x64.exeE6CAB4D934D4C425745A5862D50A17E55A7A9659495C25235DDAD6C820ABE4E9146DDCBC086BE30AD80C4BE31B9D8F3016AEB9BB
MSIPatchRegFix-X86.exe94A84B80B8B45A1AC53A0E5D085513DA0F099655C83C5EE1D4FBFF5260A7D984471EAF4C6004431C21B4F661018BDB92CC124290
MSIPatchRegFix-AMD64.exe5011CB29B096FB674A4795EE8FC2F7FDAD33863ABA62C33DD90ECC3C945AE4F52EEEB2FA07D2C53FB975263B483D09D80F02230D
NDP40-KB2972215-x86.exeE29CBC6C4DD603C8965ACA1CE75528FE1B345A30F4078D9A5E00AA03B096CAB048AC16DC53B3DE0E6133B05AD044599EA218A052
MSIPatchRegFix-IA64.exeCB861EAF1F4CDFFAD5F83604C7250CD9EDD9643361867793FC7556B79E5833CC18F493A5611EDE94E0D944575E89BAA76B223A0D
NDP40-KB2972215-IA64.exeA2F1CCB7FCDB98F7B06811530E3F664C9295AD75A64A8BA8DC1A694D0EB3F2B6F33A73C26C5CDE0518613C73D58250DE109B1047
NDP45-KB2972216-x64.exe7D8CD1E4729A566AC04E93D97DECDA963905CF0C45EC786CBCDC0436C44C0B3E9415440455A5D35D6E68053BE5D97D99B8988987
NDP45-KB2972216-x86.exeDD3AEEB09ECC22ABCACF313734D17613BF1149C5D94B43F559FA89735758C97C97EB15D0B09BCDE978725DC7917B561E04779F80
Windows6.1-KB2973112-x86.msu6558BD81FAC864730735F35DD4323CDAB2E872AF2B5700C1A3C229BA289078AFA0AC9ABC7E20F41C38FB9D118C986076F0E02463
Windows6.1-KB2973112-ia64.msuD8B3937551A73DCC4972F4C3BA953E4FE695298829A4882BBC067350520AFAC1B27CC1A2B14411C9F5E0E6BE6B786FD6C98B02A6
Windows6.1-KB2973112-x64.msuFAC43E09CCFBE279CCB5137D6AB36C31C7FBB22F2F45D5591823C7219DA9191CC0A934B687FC91A7F26709CCE973E5FE1696115A
Windows8-RT-KB2973113-x64.msu791CE015914B2D3CC0D77D67DDC02AFD054B6DA38AAF3AA2962E5E2991402A622C100ABAD1C02A2432BCFA27C0BA9AD8571AD90F
Windows8-RT-KB2973113-x86.msu17FB2BB65878B1E7FC902B5CE0299A275CAFF734D4F4F23B96B3F079CDA28DCBFC3A60703D6A2FF68AF97A16DCEFF1814CF9ADA4
Windows8.1-KB2973114-x64.msuE4218D8571CC7C6C694126D5EED604D0FC7A1599AF1B50D0151BB11249A6B577F0C1EF4BE37E09C5C27CF6D13CAA8EDA06336C2A
Windows8.1-KB2973114-x86.msuCB503C6B321E7DF5B2710FAFBDAF0EBD88569C71598C3BAB81E94DDD2A5BDABF913D07429C56BCBF3284F431E4D30ED6C99B149E
Windows8.1-KB2973114-x86.msuCB503C6B321E7DF5B2710FAFBDAF0EBD88569C71598C3BAB81E94DDD2A5BDABF913D07429C56BCBF3284F431E4D30ED6C99B149E
Windows8.1-KB2973114-x64.msuE4218D8571CC7C6C694126D5EED604D0FC7A1599AF1B50D0151BB11249A6B577F0C1EF4BE37E09C5C27CF6D13CAA8EDA06336C2A
MSIPatchRegFix-X86.exe94A84B80B8B45A1AC53A0E5D085513DA0F099655C83C5EE1D4FBFF5260A7D984471EAF4C6004431C21B4F661018BDB92CC124290
MSIPatchRegFix-AMD64.exe5011CB29B096FB674A4795EE8FC2F7FDAD33863ABA62C33DD90ECC3C945AE4F52EEEB2FA07D2C53FB975263B483D09D80F02230D
NDP30SP2-KB2973115-x64.exe0241A767909A7F52C96E211F1242AB853DA090967D31B5D1362A15724E538C9EDD7CE2B8F00CCF63B2EE73AAF4502159CC8CB809
NDP30SP2-KB2973115-x86.exeAC2FD93A40417F5CD11EFF5D13BA76B4D8907D9CDCD120129818E6499E7096CAB5A0E63E515B7300F69B891D629319339CFC7B4F
Windows6.0-KB2974268-x86.msu6D0F0B638B23B07B71B7E584D87CA0AE467B7DCD1198DD348C76AE754302B0A234D3866CBD5FEDC868AFCCCCEE15690917A111AD
Windows6.0-KB2974268-ia64.msu8ED525F1AC21096487E8AAC3A2A6E48A40D9D4CE6F4DB2D0C36BABFFF506B2823D81C865C70178554A91AD27A83447C057C58289
Windows6.0-KB2974268-x64.msu34F8B326B0113FD006D5D41B3E97E9D291F032B6935AE1BBF694C6788F409C1234DB456E86A9D1B358B3CD927937EA1386204685
Windows6.0-KB980842-x64.msu56CCB4131E94F0E4740AC65D54603AD9A2F32FDECC84E048D5B9A0F35F9FE981C1F0FCA67261D0C07B026B18B5626DE9ED97C6F1
Windows6.0-KB2901113-x64.msu216A35BF2B5E7782B1480D5CDD9B647CB3B2243C1E630D2EA29D4615F7A6E5D7352DDB8ED86112A1735E103D4361B05EEF3243CD
Windows6.0-KB2901113-x86.msu05617C64C3776658D625D3E99C398A87468C261BB9298C5417E9E8F9E33CA0C18617EA90BA8FDB3BBE6912E6D6D0E3F8F7AABD3D
Windows6.0-KB980842-x86.msuA6FC223B39B42789FF7A319AFEFF86DF2913D187C41C2294AC8CEDE7308711183F8E0FA5BE9208ACBEEF5DB347BE6E0C8AF2E4AA
Windows6.0-KB2901113-ia64.msu38B6F053764B77F556E7560DA376521000682A2180742F7CB78A03841F1F66FBF584C9E792455B8B394795EFB5A03D60FEFE804F
Windows6.0-KB980842-ia64.msu2A2A67B37490C495E23B1EC709BACA49D06F02729494EDBFFE5DF90060C253C6E185DC2EE9739C144BCF1B25C2F42914078752EC
Windows8.1-KB2977765-x86.msu1AC0BC6BE1511F4B8503E86C54EF2BEBDC91513C773755192BCCDF7D1F22A4CA710359EE37F62D68BEA3EDFF21B2666216780596
Windows8.1-KB2977765-x64.msuC83E14F82731EC26B428170304A3DBED3E3AA8EF22B06A11BCD745CDD87991D5B05DB4B8479315963703BBC150F7D684B310DF60
Windows8.1-KB2977765-x64.msuC83E14F82731EC26B428170304A3DBED3E3AA8EF22B06A11BCD745CDD87991D5B05DB4B8479315963703BBC150F7D684B310DF60
Windows8.1-KB2977765-x86.msu1AC0BC6BE1511F4B8503E86C54EF2BEBDC91513C773755192BCCDF7D1F22A4CA710359EE37F62D68BEA3EDFF21B2666216780596
Windows8-RT-KB2977766-x64.msuAD8C4AEE1010479F3357CDE08693091072A59C5D5C5ED5CC0604B5CEFC6372414E83C6765670186E7563C6C55EA1966A91412E17
Windows8-RT-KB2977766-x86.msuF20DF5B7D715AB8746D1F1D3023494EB27F8CC4F43C67F57A8202C020546484F83AF0F7FC0DE0BB8FF017FF00961C15A5748D179

↑ Back to the top



Applies to

This article applies to the following:
  • The Microsoft .NET Framework 4.5.2 when used with:
    • Windows 8.1
    • Windows RT 8.1
    • Windows Server 2012 R2
    • Windows 8
    • Windows RT
    • Windows Server 2012
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
  • The Microsoft .NET Framework 4.5.1 when used with:
    • Windows 8.1
    • Windows RT 8.1
    • Windows Server 2012 R2
    • Windows 8
    • Windows RT
    • Windows Server 2012
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
  • The Microsoft .NET Framework 4.5 when used with:
    • Windows 8
    • Windows RT
    • Windows Server 2012
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
  • The Microsoft .NET Framework 4 when used with:
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows Server 2003 Service Pack 2
  • The Microsoft .NET Framework 3.5.1 when used with:
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
  • The Microsoft .NET Framework 3.5 when used with:
    • Windows 8.1
    • Windows RT 8.1
    • Windows Server 2012 R2
    • Windows 8
    • Windows RT
    • Windows Server 2012
  • The Microsoft .NET Framework 3.0 Service Pack 2 when used with:
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows Server 2003 Service Pack 2
  • The Microsoft .NET Framework 2.0 Service Pack 2 when used with:
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Microsoft Windows Server 2003 Service Pack 2
  • The Microsoft .NET Framework 1.1 Service Pack 1 when used with:
    • Windows Server 2003 Service Pack 2

↑ Back to the top


Keywords: atdownload, kbbug, kbexpertiseinter, kbfix, kblangall, kbsecurity, kbsecbulletin, kbsecreview, kb, kbsecvulnerability, kbmustloc

↑ Back to the top

Article Info
Article ID : 2990931
Revision : 1
Created on : 1/7/2017
Published on : 9/9/2014
Exists online : False
Views : 69