Security Lab

Выполнение произвольного кода в Microsoft .NET Framework

Дата публикации:15.06.2011
Всего просмотров:3541
Опасность:
Высокая
Наличие исправления: Да
Количество уязвимостей:1
CVSSv2 рейтинг: 10 (AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:O/RC:C)
CVE ID: CVE-2011-1271
Вектор эксплуатации: Удаленная
Воздействие: Компрометация системы
CWE ID: Нет данных
Наличие эксплоита: Нет данных
Уязвимые продукты: Microsoft .NET Framework 2.x
Microsoft .NET Framework 3.x
Microsoft .NET Framework 4.x
Уязвимые версии: Microsoft Windows XP
Microsoft Windows 2003
Microsoft Windows Vista
Microsoft Windows 2008
Microsoft Windows 7

Описание:
Уязвимость позволяет удаленному пользователю выполнять произвольный код на целевой системе.

Уязвимость существует из-за того, что .NET JIT компилятор некорректно осуществляет проверку некоторых значений в объекте. Удаленный пользователь может с помощью специально сформированного web-сайта, на котором находится XBAP приложение, выполнить произвольный код на целевой системе.

URL производителя: www.microsoft.com

Решение: Установите исправление с сайта производителя.

--Windows XP Service Pack 3--

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628

 

-- Windows XP Service Pack 3 --

Microsoft .NET Framework 3.5
http://www.microsoft.com/downloads/details.aspx?familyid=c7e115a1-486b-4a2b-a7d6-42c4018fc02d

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628

 

--Windows XP Professional x64 Edition Service Pack 2--

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628

 

--Windows XP Professional x64 Edition Service Pack 2--

Microsoft .NET Framework 3.5
http://www.microsoft.com/downloads/details.aspx?familyid=c7e115a1-486b-4a2b-a7d6-42c4018fc02d

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2003 Service Pack 2--

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628

 

--Windows Server 2003 Service Pack 2--

Microsoft .NET Framework 3.5
http://www.microsoft.com/downloads/details.aspx?familyid=c7e115a1-486b-4a2b-a7d6-42c4018fc02d

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2003 x64 Edition Service Pack 2--

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628

 

--Windows Server 2003 x64 Edition Service Pack 2--

Microsoft .NET Framework 3.5
http://www.microsoft.com/downloads/details.aspx?familyid=c7e115a1-486b-4a2b-a7d6-42c4018fc02d

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2003 with SP2 for Itanium-based Systems--

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628

 

--Windows Server 2003 with SP2 for Itanium-based Systems--

Microsoft .NET Framework 3.5
http://www.microsoft.com/downloads/details.aspx?familyid=c7e115a1-486b-4a2b-a7d6-42c4018fc02d

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628

Microsoft .NET
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Vista Service Pack 1--

Microsoft .NET Framework 2.0 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8

 

--Windows Vista Service Pack 1--

Microsoft .NET Framework 3.5
http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Vista Service Pack 2--

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d

 

--Windows Vista Service Pack 2--

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Vista x64 Edition Service Pack 1--

Microsoft .NET Framework 2.0 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8

 

--Windows Vista x64 Edition Service Pack 1--

Microsoft .NET Framework 3.5
http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Vista x64 Edition Service Pack 2--

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d

 

--Windows Vista x64 Edition Service Pack 2--

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2008 for 32-bit Systems--

Microsoft .NET Framework 2.0 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8

 

--Windows Server 2008 for 32-bit Systems--

Microsoft .NET Framework 3.5
http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2008 for 32-bit Systems Service Pack 2--

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d

 

--Windows Server 2008 for 32-bit Systems Service Pack 2--

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2008 for x64-based Systems--

Microsoft .NET Framework 2.0 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8

 

--Windows Server 2008 for x64-based Systems--

Microsoft .NET Framework 3.5
http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2008 for x64-based Systems Service Pack 2--

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2008 for Itanium-based Systems--

Microsoft .NET Framework 2.0 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8

 

--Windows Server 2008 for Itanium-based Systems--

Microsoft .NET Framework 3.5
http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2008 for Itanium-based Systems Service Pack 2--

Microsoft .NET Framework 2.0 Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d

 

--Windows Server 2008 for Itanium-based Systems Service Pack 2--

Microsoft .NET Framework 3.5 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows 7 for 32-bit Systems--

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=bff13134-ed84-4370-beb4-340c340a5d98

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows 7 for 32-bit Systems Service Pack 1--

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=dab623bf-d23d-42a9-9e74-ae75d779b980

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows 7 for x64-based Systems--

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=bff13134-ed84-4370-beb4-340c340a5d98

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows 7 for x64-based Systems Service Pack 1--

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=dab623bf-d23d-42a9-9e74-ae75d779b980

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2008 R2 for x64-based Systems--

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=bff13134-ed84-4370-beb4-340c340a5d98

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2008 R2 for x64-based Systems Service Pack 1--

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=dab623bf-d23d-42a9-9e74-ae75d779b980

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2008 R2 for Itanium-based Systems--

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=bff13134-ed84-4370-beb4-340c340a5d98

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

 

--Windows Server 2008 R2 for Itanium-based Systems Service Pack 1--

Microsoft .NET Framework 3.5.1
http://www.microsoft.com/downloads/details.aspx?familyid=dab623bf-d23d-42a9-9e74-ae75d779b980

Microsoft .NET Framework 4.0
http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951

Ссылки: MS11-044: Vulnerability in .NET Framework Could Allow Remote Code Execution (2538814)
Журнал изменений: a:2:{s:4:"TEXT";s:47:"15.06.2011
Изменено описание уязвимости.";s:4:"TYPE";s:4:"html";}