Выполнение произвольного кода в Microsoft .NET Framework

Дата публикации:	15.06.2011
Всего просмотров:	3576
Опасность:	Высокая
Наличие исправления:	Да
Количество уязвимостей:	1
CVSSv2 рейтинг:	10 (AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:O/RC:C)
CVE ID:	CVE-2011-1271
Вектор эксплуатации:	Удаленная
Воздействие:	Компрометация системы
CWE ID:	Нет данных
Наличие эксплоита:	Нет данных
Уязвимые продукты:	Microsoft .NET Framework 2.x Microsoft .NET Framework 3.x Microsoft .NET Framework 4.x
	Уязвимые версии: Microsoft Windows XP Microsoft Windows 2003 Microsoft Windows Vista Microsoft Windows 2008 Microsoft Windows 7 Описание: Уязвимость позволяет удаленному пользователю выполнять произвольный код на целевой системе. Уязвимость существует из-за того, что .NET JIT компилятор некорректно осуществляет проверку некоторых значений в объекте. Удаленный пользователь может с помощью специально сформированного web-сайта, на котором находится XBAP приложение, выполнить произвольный код на целевой системе. URL производителя: www.microsoft.com Решение: Установите исправление с сайта производителя.
	--Windows XP Service Pack 3-- Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628 -- Windows XP Service Pack 3 -- Microsoft .NET Framework 3.5 http://www.microsoft.com/downloads/details.aspx?familyid=c7e115a1-486b-4a2b-a7d6-42c4018fc02d Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628 --Windows XP Professional x64 Edition Service Pack 2-- Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628 --Windows XP Professional x64 Edition Service Pack 2-- Microsoft .NET Framework 3.5 http://www.microsoft.com/downloads/details.aspx?familyid=c7e115a1-486b-4a2b-a7d6-42c4018fc02d Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2003 Service Pack 2-- Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628 --Windows Server 2003 Service Pack 2-- Microsoft .NET Framework 3.5 http://www.microsoft.com/downloads/details.aspx?familyid=c7e115a1-486b-4a2b-a7d6-42c4018fc02d Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2003 x64 Edition Service Pack 2-- Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628 --Windows Server 2003 x64 Edition Service Pack 2-- Microsoft .NET Framework 3.5 http://www.microsoft.com/downloads/details.aspx?familyid=c7e115a1-486b-4a2b-a7d6-42c4018fc02d Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2003 with SP2 for Itanium-based Systems-- Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628 --Windows Server 2003 with SP2 for Itanium-based Systems-- Microsoft .NET Framework 3.5 http://www.microsoft.com/downloads/details.aspx?familyid=c7e115a1-486b-4a2b-a7d6-42c4018fc02d Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=960f8920-906b-48a8-8700-94f09babc628 Microsoft .NET http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Vista Service Pack 1-- Microsoft .NET Framework 2.0 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4 Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8 --Windows Vista Service Pack 1-- Microsoft .NET Framework 3.5 http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4 Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Vista Service Pack 2-- Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d --Windows Vista Service Pack 2-- Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Vista x64 Edition Service Pack 1-- Microsoft .NET Framework 2.0 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4 Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8 --Windows Vista x64 Edition Service Pack 1-- Microsoft .NET Framework 3.5 http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4 Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Vista x64 Edition Service Pack 2-- Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d --Windows Vista x64 Edition Service Pack 2-- Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2008 for 32-bit Systems-- Microsoft .NET Framework 2.0 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4 Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8 --Windows Server 2008 for 32-bit Systems-- Microsoft .NET Framework 3.5 http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4 Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2008 for 32-bit Systems Service Pack 2-- Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d --Windows Server 2008 for 32-bit Systems Service Pack 2-- Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2008 for x64-based Systems-- Microsoft .NET Framework 2.0 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4 Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8 --Windows Server 2008 for x64-based Systems-- Microsoft .NET Framework 3.5 http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4 Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2008 for x64-based Systems Service Pack 2-- Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2008 for Itanium-based Systems-- Microsoft .NET Framework 2.0 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4 Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8 --Windows Server 2008 for Itanium-based Systems-- Microsoft .NET Framework 3.5 http://www.microsoft.com/downloads/details.aspx?familyid=5f7092fe-079d-4175-b8b7-412f259ff7e4 Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=80423e37-0a54-413d-b44a-41c68c2030b8 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2008 for Itanium-based Systems Service Pack 2-- Microsoft .NET Framework 2.0 Service Pack 2 http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d --Windows Server 2008 for Itanium-based Systems Service Pack 2-- Microsoft .NET Framework 3.5 Service Pack 1 http://www.microsoft.com/downloads/details.aspx?familyid=1e3ca981-5565-41a8-ab5e-941c92e74c7d Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows 7 for 32-bit Systems-- Microsoft .NET Framework 3.5.1 http://www.microsoft.com/downloads/details.aspx?familyid=bff13134-ed84-4370-beb4-340c340a5d98 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows 7 for 32-bit Systems Service Pack 1-- Microsoft .NET Framework 3.5.1 http://www.microsoft.com/downloads/details.aspx?familyid=dab623bf-d23d-42a9-9e74-ae75d779b980 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows 7 for x64-based Systems-- Microsoft .NET Framework 3.5.1 http://www.microsoft.com/downloads/details.aspx?familyid=bff13134-ed84-4370-beb4-340c340a5d98 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows 7 for x64-based Systems Service Pack 1-- Microsoft .NET Framework 3.5.1 http://www.microsoft.com/downloads/details.aspx?familyid=dab623bf-d23d-42a9-9e74-ae75d779b980 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2008 R2 for x64-based Systems-- Microsoft .NET Framework 3.5.1 http://www.microsoft.com/downloads/details.aspx?familyid=bff13134-ed84-4370-beb4-340c340a5d98 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2008 R2 for x64-based Systems Service Pack 1-- Microsoft .NET Framework 3.5.1 http://www.microsoft.com/downloads/details.aspx?familyid=dab623bf-d23d-42a9-9e74-ae75d779b980 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2008 R2 for Itanium-based Systems-- Microsoft .NET Framework 3.5.1 http://www.microsoft.com/downloads/details.aspx?familyid=bff13134-ed84-4370-beb4-340c340a5d98 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951 --Windows Server 2008 R2 for Itanium-based Systems Service Pack 1-- Microsoft .NET Framework 3.5.1 http://www.microsoft.com/downloads/details.aspx?familyid=dab623bf-d23d-42a9-9e74-ae75d779b980 Microsoft .NET Framework 4.0 http://www.microsoft.com/downloads/details.aspx?familyid=f7afba05-974f-48f8-b600-9e131ceb7951
Ссылки:	MS11-044: Vulnerability in .NET Framework Could Allow Remote Code Execution (2538814)
Журнал изменений:	a:2:{s:4:"TEXT";s:47:"15.06.2011 Изменено описание уязвимости.";s:4:"TYPE";s:4:"html";}

Выполнение произвольного кода в Microsoft .NET Framework

Подпишитесь на email рассылку