Warning message when you try to install a .NET Framework 1.0 Service Pack 3 or .NET Framework 1.1 Service Pack 1 security update on a Windows Vista-based computer: "An unidentified program wants to access your computer"

When you try to install a security update for the Microsoft .NET Framework 1.0 Service Pack 3 (SP3) or for the Microsoft .NET Framework 1.1 Service Pack 1 (SP1) on a computer that is running Windows Vista, you may receive the following warning message:

This message is a notification message from the User Account Control (UAC) feature in Windows Vista. This message indicates that the update that you are running does not conform to the regular standards for an update that is released by Microsoft. In this particular case, the executable is missing a manifest that tells Windows Vista that this application is provided by a trusted publisher, such as Microsoft Corporation. The missing manifest in the update causes no problems other than the message that is mentioned in the "Symptoms" section.

The security vulnerabilities that are addressed by this security update are rated at the highest severity (Critical), and these security vulnerabilities could enable an attacker to take complete control of the computer. The recommendation for this particular update is that you install this security update after you make sure that you have downloaded the update from the Microsoft Web site. You can use the links that are referenced in the security bulletin to download the update from the Microsoft Web site. To install this security update, click the following option when you see the message that is mentioned in the "Symptoms" section:Important Note The recommendation in this Knowledge Base article is an exception to the norm. This recommendation should not be used as general guidance for installing other applications or other updates that come from an untrusted source or an unknown source. This recommendation is specific to this update.