View products that this article applies to.

Introduction

This update resolves vulnerabilities that could allow elevation of privilege if a user goes to a specially crafted website or a website that contains specially crafted web content.

Summary

Microsoft has released security bulletin MS14-009. Learn more about how to obtain the fixes that are included in this security bulletin:

  • For individual, small business, and organizational users, use the Windows automatic updating feature to install the fixes from Microsoft Update. To do this, see Get security updates automatically on the Microsoft Safety and Security Center website.

  • For IT professionals, see Microsoft Security Bulletin MS14-009 on the Security TechCenter website.

How to obtain help and support for this security update

Help installing updates: Support for Microsoft UpdateSecurity solutions for IT professionals: TechNet Security Troubleshooting and SupportHelp protect your Windows-based computer from viruses and malware: Virus Solution and Security CenterLocal support according to your country: International Support

More information about this security update

Download information

This update is available for download from the Microsoft Download Center.

Prerequisites

To install this update, you must have Windows Installer 3.1 or a later version installed on the computer.

Command-line switches for this update

See the various command-line switches that are supported by this Microsoft .NET Framework update.

Restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement information

This update replaces update 2656351.

Update removal information

Note We do not recommend that you remove any security update.To remove this update, use the Add or Remove Programs item or use the Programs and Features item in Control Panel.

The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

For all supported x86-based versions of systems

GDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.1022

192,672

08-Jan-2014

13:28

Setup.exe

10.0.30319.1022

78,992

08-Jan-2014

13:28

SetupEngine.dll

10.0.30319.1022

810,648

08-Jan-2014

13:28

SetupUi.dll

10.0.30319.1022

296,592

08-Jan-2014

13:28

aspnet_wp.exe

4.0.30319.1022

33,432

08-Jan-2014

14:46

System.Web.Extensions.dll

4.0.30319.1022

1,867,440

08-Jan-2014

14:47

System.Web.dll

4.0.30319.1022

5,257,880

08-Jan-2014

14:47

webengine.dll

4.0.30319.1022

15,000

08-Jan-2014

14:46

webengine4.dll

4.0.30319.1022

496,280

08-Jan-2014

14:46

LDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.2034

192,672

08-Jan-2014

13:39

Setup.exe

10.0.30319.2034

78,992

08-Jan-2014

13:39

SetupEngine.dll

10.0.30319.2034

810,648

08-Jan-2014

13:39

SetupUi.dll

10.0.30319.2034

296,592

08-Jan-2014

13:39

aspnet_wp.exe

4.0.30319.2034

33,432

08-Jan-2014

15:12

System.Web.Extensions.dll

4.0.30319.2034

1,867,440

08-Jan-2014

15:13

System.Web.dll

4.0.30319.2034

5,261,464

08-Jan-2014

15:12

webengine.dll

4.0.30319.2034

15,000

08-Jan-2014

15:12

webengine4.dll

4.0.30319.2034

496,280

08-Jan-2014

15:12

For all supported x64-based versions of systems

GDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.1022

261,792

08-Jan-2014

13:53

ServiceModelReg.exe

4.0.30319.1022

192,672

08-Jan-2014

13:28

Setup.exe

10.0.30319.1022

78,992

08-Jan-2014

13:28

SetupEngine.dll

10.0.30319.1022

810,648

08-Jan-2014

13:28

SetupUi.dll

10.0.30319.1022

296,592

08-Jan-2014

13:28

aspnet_wp.exe

4.0.30319.1022

41,624

08-Jan-2014

15:02

aspnet_wp.exe

4.0.30319.1022

33,432

08-Jan-2014

14:46

System.Web.Extensions.dll

4.0.30319.1022

1,867,440

08-Jan-2014

14:47

System.Web.dll

4.0.30319.1022

5,227,672

08-Jan-2014

15:03

System.Web.dll

4.0.30319.1022

5,257,880

08-Jan-2014

14:47

webengine.dll

4.0.30319.1022

16,536

08-Jan-2014

15:02

webengine.dll

4.0.30319.1022

15,000

08-Jan-2014

14:46

webengine4.dll

4.0.30319.1022

721,560

08-Jan-2014

15:02

webengine4.dll

4.0.30319.1022

496,280

08-Jan-2014

14:46

LDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.2034

261,792

08-Jan-2014

14:07

ServiceModelReg.exe

4.0.30319.2034

192,672

08-Jan-2014

13:39

Setup.exe

10.0.30319.2034

78,992

08-Jan-2014

13:39

SetupEngine.dll

10.0.30319.2034

810,648

08-Jan-2014

13:39

SetupUi.dll

10.0.30319.2034

296,592

08-Jan-2014

13:39

aspnet_wp.exe

4.0.30319.2034

41,624

08-Jan-2014

15:34

aspnet_wp.exe

4.0.30319.2034

33,432

08-Jan-2014

15:12

System.Web.Extensions.dll

4.0.30319.2034

1,867,440

08-Jan-2014

15:13

System.Web.dll

4.0.30319.2034

5,231,256

08-Jan-2014

15:34

System.Web.dll

4.0.30319.2034

5,261,464

08-Jan-2014

15:12

webengine.dll

4.0.30319.2034

16,536

08-Jan-2014

15:34

webengine.dll

4.0.30319.2034

15,000

08-Jan-2014

15:12

webengine4.dll

4.0.30319.2034

722,072

08-Jan-2014

15:34

webengine4.dll

4.0.30319.2034

496,280

08-Jan-2014

15:12

For all supported IA-64-based versions of systems

GDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.1022

545,440

08-Jan-2014

14:20

ServiceModelReg.exe

4.0.30319.1022

192,672

08-Jan-2014

13:28

Setup.exe

10.0.30319.1022

78,992

08-Jan-2014

13:28

SetupEngine.dll

10.0.30319.1022

810,648

08-Jan-2014

13:28

SetupUi.dll

10.0.30319.1022

296,592

08-Jan-2014

13:28

aspnet_wp.exe

4.0.30319.1022

81,048

08-Jan-2014

15:18

aspnet_wp.exe

4.0.30319.1022

33,432

08-Jan-2014

14:46

System.Web.Extensions.dll

4.0.30319.1022

1,867,440

08-Jan-2014

14:47

System.Web.dll

4.0.30319.1022

4,846,744

08-Jan-2014

15:18

System.Web.dll

4.0.30319.1022

5,257,880

08-Jan-2014

14:47

webengine.dll

4.0.30319.1022

26,264

08-Jan-2014

15:18

webengine.dll

4.0.30319.1022

15,000

08-Jan-2014

14:46

webengine4.dll

4.0.30319.1022

1,342,104

08-Jan-2014

15:18

webengine4.dll

4.0.30319.1022

496,280

08-Jan-2014

14:46

LDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.2034

545,440

08-Jan-2014

14:40

ServiceModelReg.exe

4.0.30319.2034

192,672

08-Jan-2014

13:39

Setup.exe

10.0.30319.2034

78,992

08-Jan-2014

13:39

SetupEngine.dll

10.0.30319.2034

810,648

08-Jan-2014

13:39

SetupUi.dll

10.0.30319.2034

296,592

08-Jan-2014

13:39

aspnet_wp.exe

4.0.30319.2034

81,048

08-Jan-2014

15:55

aspnet_wp.exe

4.0.30319.2034

33,432

08-Jan-2014

15:12

System.Web.Extensions.dll

4.0.30319.2034

1,867,440

08-Jan-2014

15:13

System.Web.dll

4.0.30319.2034

4,850,840

08-Jan-2014

15:55

System.Web.dll

4.0.30319.2034

5,261,464

08-Jan-2014

15:12

webengine.dll

4.0.30319.2034

26,264

08-Jan-2014

15:55

webengine.dll

4.0.30319.2034

15,000

08-Jan-2014

15:12

webengine4.dll

4.0.30319.2034

1,343,128

08-Jan-2014

15:55

webengine4.dll

4.0.30319.2034

496,280

08-Jan-2014

15:12

Applies toThis article applies to the following:

  • Microsoft .NET Framework 4 when used with:

    • Windows 7 Service Pack 1

    • Windows Server 2008 R2 Service Pack 1

    • Windows Vista Service Pack 2

    • Windows Server 2008 Service Pack 2

    • Windows XP Service Pack 3

    • Windows Server 2003 Service Pack 2

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.