September 9, 2014 This security update has been re-released for release on Windows Update and contains some updated articles. We recommend that you apply this updated security update.
View products that this article applies to.
Introduction
This security update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege on a server system if a user views a specially crafted webpage by using a web browser that can run ASP.NET applications.
Summary
Microsoft has released security advisory 2905247. You can view the complete security advisory by going to the following Microsoft website:
http://technet.microsoft.com/security/advisory/2905247
How to obtain help and support for this update
Help installing updates: Support for Microsoft Update
Security solutions for IT professionals: TechNet Security Troubleshooting and Support
Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center
Local support according to your country: International Support
More Information
Installation information
Before you apply this update, make sure that you resolve any view state message authentication code (MAC) errors that you may have. For information about how to do this, see Resolving view state message authentication code (MAC) errors in the Microsoft Knowledge Base.
More information about this update
The following articles contain more information about this update as it relates to individual product versions. The articles may contain specific information to the individual updates such as a download URL, prerequisites, and command line switches.
Microsoft .NET Framework 4.5 and the .NET Framework 4.5.1
2894855 Description of the security update for the .NET Framework 4.5 and the .NET Framework 4.5.1 on Windows 8, Windows RT, and Windows Server 2012: December 10, 2013
2894856 Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: December 10, 2013
2894854 Description of the security update for the .NET Framework 4.5 and the .NET Framework 4.5.1 on Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1, Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: December 10, 2013
Microsoft .NET Framework 4
- 2894842 Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: December 10, 2013
Microsoft .NET Framework 3.5.1
- 2894844 Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: December 10, 2013
Microsoft .NET Framework 3.5
2894852 Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: December 10, 2013
2894851 Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: December 10, 2013
Microsoft .NET Framework 2.0
2894847 Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: December 10, 2013
2894843 Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Server 2003: December 10, 2013
Microsoft .NET Framework 1.1
- 2894845 Description of the security update for the .NET Framework 1.1 Service Pack 1 on Windows Server 2003 Service Pack 2 32-bit Edition: December 10, 2013
Update replacement information
Update replacement information for each specific update can be found in the Knowledge Base articles that correspond to this update.
File hash information
| File name | SHA1 hash | SHA256 hash |
|---|---|---|
| MSIPatchRegFix-AMD64.exe | 5011CB29B096FB674A4795EE8FC2F7FDAD33863A | BA62C33DD90ECC3C945AE4F52EEEB2FA07D2C53FB975263B483D09D80F02230D |
| MSIPatchRegFix-IA64.exe | CB861EAF1F4CDFFAD5F83604C7250CD9EDD96433 | 61867793FC7556B79E5833CC18F493A5611EDE94E0D944575E89BAA76B223A0D |
| MSIPatchRegFix-X86.exe | 94A84B80B8B45A1AC53A0E5D085513DA0F099655 | C83C5EE1D4FBFF5260A7D984471EAF4C6004431C21B4F661018BDB92CC124290 |
| NDP20SP2-KB2894843-IA64.exe | 14210062F040B05D7AC5606AD47DB9D3A6017706 | F9D5AD0A08E0368CB959649BB1AD5B526999E0FDBC61B8EB98D7972CD2AA4B3E |
| NDP20SP2-KB2894843-x64.exe | 579AFBD9190E1DD2FE50B8C5576AD4B932121C26 | B408D323EF2F3D94D1F57C39EB1DC15CF67AF668CFF3CC678A32332980D699AC |
| NDP20SP2-KB2894843-x86.exe | 36228A0825744E86A31A0D0D020ADA3B2D0DA9FA | A9B45B58AA6B37A339C0B90911DC0944B4C8B668DEA855759E32CB7538A1413F |
| NDP40-KB2894842-IA64.exe | 248E1BD29794E50A931946DD70FA6F4360158FE1 | 45FD2A721E24C9CC86E1B1AC80D12D338A50ED8E46096AD592E256300A01C19A |
| NDP40-KB2894842-x64.exe | B417314336401EAFAEA20D771E4C37AC3075AC58 | 4B4D44F7FDD2D08343BA74C1E98F40E6DAE3653E4B910C05A843932F72D071D8 |
| NDP40-KB2894842-x86.exe | 10950C90D521C6968EDF267C890DE6DDD0C2B114 | E57CE083E6A2F30780467648601D97BA7414E87DECFE3696B40115162F26E3AA |
| NDP45-KB2894849-x64.exe | A40B8E5DB56B7082D74AAFDD3CE232A2108C7E6C | B26FFCB9458113486DC268791EDE6D057C4057BBB43651C4E78BEF627E8ED136 |
| NDP45-KB2894849-x86.exe | 9A83CB551D62A73C30732DA2B38BFFDC90B3D753 | 95B2AA9C2609F719C248FCAD45F53B6650A2206C8BFDC9F26B0D9663243073D3 |
| NDP45-KB2894854-x64.exe | 9ED6490DB0AB643D622089226FFFF898539535D3 | 87A2CE7C04C4B2089B710DCF4298A01E5ACC70112C30291764A7CE7A12F7194F |
| NDP45-KB2894854-x86.exe | 8340A11457781186566E6CB9D4BEAF6BE5AA7559 | 0BA44647620C1813EF1EC11556B5722DA32DADE18C014AC952D6650D643141A6 |
| NDP45-KB2895210-x64.exe | E6EE3FFF616938A34E5909AE2224BACCB4455925 | 7D6B27AC1A4EF62296AF628EC32FC09B6C67C5A57549EF5A6824DB67ACCA85B4 |
| NDP45-KB2895210-x86.exe | 031A840ABDE5412785D9947F2B23B90AE34236FE | 19ACBF86CB8F64DD332BEE3E9745B6162C5238C6BF67EA5628BAF560AB52A436 |
| Windows6.0-KB2894847-ia64.msu | 4450A143F0A0A1742EDD39B7C19D5BBEB2B618C5 | 06B85260FDA72B6F0E72E849FF91B337FB8760740B3683960FFB09DF335118F7 |
| Windows6.0-KB2894847-x64.msu | 7719EF17783CA4AE687CAB0DCB24D6567B71AA43 | 230D9D7B668EF64FE12246C23E4D4D90DB99D13FAA534F2DA8C45377CBD2DBCA |
| Windows6.0-KB2894847-x86.msu | 9D672B6FD6DAA1CA7C20051DE91FEE613F540BDC | 8CEDF33EA95966E383903E6CB63B3ED60E48317F0F2120972D077201B54CD860 |
| Windows6.0-KB980842-ia64.msu | 2A2A67B37490C495E23B1EC709BACA49D06F0272 | 9494EDBFFE5DF90060C253C6E185DC2EE9739C144BCF1B25C2F42914078752EC |
| Windows6.0-KB980842-x64.msu | 56CCB4131E94F0E4740AC65D54603AD9A2F32FDE | CC84E048D5B9A0F35F9FE981C1F0FCA67261D0C07B026B18B5626DE9ED97C6F1 |
| Windows6.0-KB980842-x86.msu | A6FC223B39B42789FF7A319AFEFF86DF2913D187 | C41C2294AC8CEDE7308711183F8E0FA5BE9208ACBEEF5DB347BE6E0C8AF2E4AA |
| Windows6.1-KB2894844-ia64.msu | 4D9F597BBF41BD12AC6303117F57E4AAB198F0E6 | 3C872A21600508DAE46CF88C20CFC154132A08512DC9EA972C7592694AC29C66 |
| Windows6.1-KB2894844-x64.msu | 71B051D4B2EAE12423868E28B0E5B04A9E10C048 | C6BE08B0D79070DEC45A5BF122142B695261F3AB2D56E4F3265D54B2A607B39B |
| Windows6.1-KB2894844-x86.msu | D628CB41A17B6CEE85C3BDF3E4612219FB7257BA | AA6E2E75F19339039763EA68219CEF57EE807CE35B7A2FE158E904BA467047BA |
| Windows8-RT-KB2894850-x64.msu | AA8C10C10488D8C42A8DB91F0EBA8B6F67C05BAC | 3B62008A3F76C2E9EEF0C776B7D0D076CD9066258803EAB4EDB86B6705DE715B |
| Windows8-RT-KB2894850-x86.msu | 86514238227E6DC2186AC9CCE7C4347E295853E0 | 193911A4C1CBDE07635BAE3041E3C725DDF741FE5AB9643ED86A8AFBFAF4FDAC |
| Windows8-RT-KB2894851-x64.msu | 4A9252475F4767841B6A4464BBE54E2050785112 | 3331943040886414C2E426B0EC8B083FBDD16D2358FBA7B9DB24297CB06C4937 |
| Windows8-RT-KB2894851-x86.msu | AB485A340C761CF1B95AA87AA7323E28DAAEF6DE | 94617995EC5DD8E4D802B3D8B99C203D0B0E9DA9A6033846DBBF517B082565B6 |
| Windows8-RT-KB2894855-x64.msu | 1E40693415E33C1C5E4D214B700881BD111F528F | 7C3E0BA87D94F50E3B47710C12A1986C183451645D100A1A7BB02E387D705BF0 |
| Windows8-RT-KB2894855-x86.msu | 1A590394EF1E3585D3892B8F046723051F7A132C | 21B3ED345036AE3A39B94012885A38F8B87671197D82B0F552083A20A1164A61 |
| Windows8.1-KB2894852-x64.msu | 632006854D9C3709180D7C864CABC7D1661F8240 | 84DDA0AB9C8C9D546DDAAFB29557DAE762E463C8B381744A74AEC5BCBB15E8F3 |
| Windows8.1-KB2894852-x86.msu | B5B52A14663887A6D51E34C4F5743F215CB0D3A6 | 77C01599C5C41EA4DDAD7FF951287A817FCEAE94B83EFB71882A76A2743B0C82 |
| Windows8.1-KB2894856-x64.msu | A899C1F0AEC9C21703840A618FF535905AC2F0D2 | B743D7B772444DD94EBC8F8ACD37CB4CC0CA696B9AAE551BA2450FD455B84923 |
| Windows8.1-KB2894856-x86.msu | E7ADE88F9C46EA31788DAA0AC7F3A5B539466B47 | E1E1DFB6C5A38527939B9C61DDB4A0B99E6E24DC41E0D2CC8596C712C8CB9E66 |
| WindowsServer2003-KB2894845-x86-CHS.exe | 7C60B0C99631644F182E8192143B9A0A13D78222 | 3B40C3B4804595975B122D5206C8FC1309D92BD353EBAD0941584EDEBF6C8681 |
| WindowsServer2003-KB2894845-x86-CHT.exe | B4F363D59ACBB71A539608B19D78B8F33C7CC107 | F83F94F549D168B97E626046B6CB9986B04014E91BB5A202C75B302B639F3947 |
| WindowsServer2003-KB2894845-x86-CSY.exe | DEBD244429E19FAA66EDB6D54E877D3D8EB2B4C7 | 76DF450E1695F6CC859FEACCFCC70166BE951CC7024BE26F525A99B00E553DF6 |
| WindowsServer2003-KB2894845-x86-DEU.exe | 15ED98B8F252A0DB53D780CD9E1540D1F202BEAB | 15EA4B791D671211B1ACA1DEAE418B26B84E5D6DD5166CBDB97682BA8C13ED57 |
| WindowsServer2003-KB2894845-x86-ENU.exe | 045F30403D396ACFFFBCF7E37D60D435548FCC1C | C83921E3C15A83C569A5E11955189FF76998EAF333DF9A6B64C979C10B11A940 |
| WindowsServer2003-KB2894845-x86-ESN.exe | E34687DA9F43D6526486F75C6D5FA4857FFA66F5 | 238CADA16242B7608E08011B94AC69E3512CDBCD3020F98FC8BC64CEBF56F938 |
| WindowsServer2003-KB2894845-x86-FRA.exe | DB566E95EF8577C8356B6CA4820A3165AB438C79 | 2A82E5B1FE99BCD43C932B2299D5B2DA6142D2378E1D13648C8C50A7BCFBF708 |
| WindowsServer2003-KB2894845-x86-HUN.exe | 2AAC63376EAEBEA61CBE9E4EB037EC1ECADF5E61 | 043CD3790BC43FE1C1C920C0F9AE2D75FE4054312D7F09CFFDF19664A821127A |
| WindowsServer2003-KB2894845-x86-ITA.exe | ECA206819B6C8F52FE455B377AF16F8986020B29 | 334573222D087440E5A9E2BB25CACE1151D8089DBE907F2B3F450B5B73FCB2F1 |
| WindowsServer2003-KB2894845-x86-JPN.exe | 97021525FF5867DF5E002A6675E7AA8358C15D62 | 84B88083611541C31ADA2B0F4470E43BF11EF98DC1E60768442CD072CF3E4D1E |
| WindowsServer2003-KB2894845-x86-KOR.exe | 999622189582238932B897A333473C2AA5155503 | 9034802A24310ECFCB1ABE1A14C479FD21CC66EEAD93EF9BD693BA19AFE09A10 |
| WindowsServer2003-KB2894845-x86-NLD.exe | D49A7A3007A830210E9D5D36B63FBA90434D013F | BE1A0427BB3C7C357A1003D78AC2594F2B2FA8ACFFBD05565AF65223C75C2A71 |
| WindowsServer2003-KB2894845-x86-PLK.exe | 05A08E5BA2810F932AB1639FB523CDB72B2CA263 | B680E1053E19D3D612A7AF1B38C348A30D46DBED6A02398247B297F5ADC9EE2F |
| WindowsServer2003-KB2894845-x86-PTB.exe | E9E2293EAA5A83B4AAA47F4600BAD1E227A8A88F | 9101CDFA8FBF4CE6BD05B5CFE5746DEBDB235935C304B456C6253D4999AD513F |
| WindowsServer2003-KB2894845-x86-PTG.exe | 2DCB03D6A7BDDB4F975EF31E611633578E7C0084 | D44463C5F370FE9F3865A33D80A8B02069AA565D914E5B3C5898A774CA250A7B |
| WindowsServer2003-KB2894845-x86-RUS.exe | D335C996894948A431C55E0A83B72AE4DF4C6095 | EE9AB4BD5DF3E09A3530299908E5651BD5BC5C1EF420B23131033BCB2033C441 |
| WindowsServer2003-KB2894845-x86-SVE.exe | D5461A2AEA4D89474374C262654E3BF2192A323E | 28F4C14F94DA7CC06EC1C590A481F184E2076A87610DF9C39E65F303EB4F0D92 |
| WindowsServer2003-KB2894845-x86-TRK.exe | 7B8AA1A3B6DC52EDA6BCED9E39C04DC58F79DFAF | 13E1F9DD1A60621057F28EA48BDC7E70D0D4E064412387578AAF783BA15A438C |
Applies toThis article applies to the following:
Microsoft .NET Framework 4.5.1 when used with:
- Windows 8.1
- Windows RT 8.1
- Windows Server 2012 R2
- Windows 8
- Windows RT
- Windows Server 2012
- Windows 7 Service Pack 1
- Windows Server 2008 R2 Service Pack 1
- Windows Vista Service Pack 2
- Windows Server 2008 Service Pack 2
Microsoft .NET Framework 4.5 when used with:
- Windows 8
- Windows RT
- Windows Server 2012
- Windows 7 Service Pack 1
- Windows Server 2008 R2 Service Pack 1
- Windows Vista Service Pack 2
- Windows Server 2008 Service Pack 2
Microsoft .NET Framework 4 when used with:
- Windows 7 Service Pack 1
- Windows Server 2008 R2 Service Pack 1
- Windows Vista Service Pack 2
- Windows Server 2008 Service Pack 2
- Windows Server 2003 Service Pack 2
Microsoft .NET Framework 3.5.1 when used with:
- Windows 7 Service Pack 1
- Windows Server 2008 R2 Service Pack 1
Microsoft .NET Framework 3.5 when used with:
- Windows 8
- Windows Server 2012
Microsoft .NET Framework 2.0 Service Pack 2 when used with:
- Windows Vista Service Pack 2
- Windows Server 2008 Service Pack 2
- Windows Server 2003 Service Pack 2
Microsoft .NET Framework 1.1 Service Pack 1 when used with:
- Windows Server 2003 Service Pack 2 32-bit Edition