Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

Description of the security update for the ASP.NET security feature bypass vulnerability: July 10, 2018


Summary

A security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated.

To learn more about the vulnerability, go to CVE-2018-8171.

↑ Back to the top


How to obtain the update

Method1: Microsoft Download Center

The following files are available for download from the Microsoft Download Center.



For ASP.NET Web Frameworks and Tools (aka WSR). This is for Visual Studio 2013 Update 5.

Download the package now.


For ASP.NET Web Tools (aka Web Forms). This is for Visual Studio 2013 Update 5.

Download the package now.


For ASP.NET Web Frameworks and Tools (aka WSR). This is for Visual Studio 2015 Update 3.

Download the package now.


ASP.NET Web Tools (aka Web Forms). This is for Visual Studio 2015 Update 3.

Download the package now.

Release Date: July 10, 2018

For more information about how to download Microsoft support files, click the following article number to go to the article in the Microsoft Knowledge Base:


 

↑ Back to the top


More Information

How to obtain help and support for this security update
Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

↑ Back to the top


File information

File hash information
File name SHA1 hash SHA256 hash
AspNetWebFrameworksToolsVS2013-KB4339279.exe 837F6DB64E64ED3A5EC130A0F2344D0C43EF6218 C5E414F312A13066A7143B9791647C4398CABB0BA8B0F210827E9CABEEDA26AE
AspNetWebFrameworksToolsVS2015-KB4339279.exe EE9454B4164148F59955CEC4AE962CF002F10067 193E0C6381EA78F92314711B8401E0C58BA8822E4184BF69F5BFE166D2816740
AspNetWebToolsVS2013-KB4339279.exe DF67A5FF99DC1CB4472952E02D7C6AC6AF24B754 953F4972E1B09702841313D30E4ECDC633834E1E99D00C7EBA2F93435FD8BD2F
AspNetWebToolsVS2015-KB4339279.exe 2D3577DE61F155BC7E14EAD7C264836DB45389C1 533CE9F9CB7798F0220F990D30C8808B94D9404D435EDCF595111579618B496B
File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

File name File version File size Date Time
Aspnetwebframeworkstoolsvs2013-kb4339279.exe 3.2.60629.0 179,366,200 30-Jun-2018 03:27
Aspnetwebframeworkstoolsvs2015-kb4339279.exe 3.2.60629.0 187,642,976 30-Jun-2018 03:24
Aspnetwebtoolsvs2013-kb4339279.exe 12.5.60624.0 203,792,472 03-Jul-2018 16:59
Aspnetwebtoolsvs2015-kb4339279.exe 1.0.40630.83 697,856 30-Jun-2018 06:36

↑ Back to the top


Keywords: kbsurveynew, kbsecvulnerability, kbsecurity, kbsecreview, kbsecbulletin, kblangall, kb, kbfix, kbexpertiseinter, kbbug, atdownload, kbmustloc

↑ Back to the top

Article Info
Article ID : 4339279
Revision : 19
Created on : 7/31/2018
Published on : 7/31/2018
Exists online : False
Views : 94