View products that this article applies to.

Introduction

This update resolves a vulnerability in the Microsoft .NET Framework that could allow information disclosure if an attacker sends a specially crafted web request to an affected server that has custom error messages disabled. An attacker who successfully exploits the vulnerability would be able to view parts of a web configuration file that could expose sensitive information.

Summary

Microsoft has released security bulletin MS15-041. Learn more about how to obtain the fixes that are included in this security bulletin:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft UpdateSecurity solutions for IT professionals: TechNet Security Troubleshooting and SupportHelp protect your Windows-based computer from viruses and malware: Virus Solution and Security CenterLocal support according to your country: International Support

More information about this security update

Download information

To install this update, install it from Microsoft Windows Update.Additionally, you can install this update from the Microsoft Download Center.

Prerequisites

To install this update, you must have Windows Installer 3.1 or a later version installed on the computer.

Command-line switches for this update

Learn about the various command-line switches that are supported by this Microsoft .NET Framework update.

Restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.Note This update will cause the IIS Service to restart.

Update replacement information

This update replaces the following update:

2901110 MS14-009: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: February 11, 2014

Update removal information

Note We do not recommend that you remove any security update.To remove this update, use the Programs and Features item in Control Panel.

The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

For all supported x86-based versions of systemsGDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.1031

192,664

05-Feb-2015

13:16

Setup.exe

10.0.30319.1031

78,992

05-Feb-2015

13:15

SetupEngine.dll

10.0.30319.1031

811,152

05-Feb-2015

13:15

SetupUi.dll

10.0.30319.1031

296,584

05-Feb-2015

13:15

aspnet_wp.exe

4.0.30319.1031

33,424

05-Feb-2015

14:12

System.Web.Extensions.dll

4.0.30319.1031

1,867,440

05-Feb-2015

14:12

System.Web.dll

4.0.30319.1031

5,258,392

05-Feb-2015

14:12

System.Web.Mobile.dll

4.0.30319.1031

835,752

05-Feb-2015

14:12

webengine.dll

4.0.30319.1031

14,992

05-Feb-2015

14:12

webengine4.dll

4.0.30319.1031

496,272

05-Feb-2015

14:12

LDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.2056

192,664

05-Feb-2015

15:00

Setup.exe

10.0.30319.2056

78,984

05-Feb-2015

14:59

SetupEngine.dll

10.0.30319.2056

811,152

05-Feb-2015

14:59

SetupUi.dll

10.0.30319.2056

296,584

05-Feb-2015

14:59

aspnet_wp.exe

4.0.30319.2056

33,424

05-Feb-2015

16:08

System.Web.Extensions.dll

4.0.30319.2056

1,867,432

05-Feb-2015

16:08

System.Web.dll

4.0.30319.2056

5,263,000

05-Feb-2015

16:08

System.Web.Mobile.dll

4.0.30319.2056

835,744

05-Feb-2015

16:08

webengine.dll

4.0.30319.2056

14,992

05-Feb-2015

16:08

webengine4.dll

4.0.30319.2056

496,272

05-Feb-2015

16:08

For all supported x64-based versions of systemsGDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.1031

261,792

05-Feb-2015

13:32

ServiceModelReg.exe

4.0.30319.1031

192,664

05-Feb-2015

13:16

Setup.exe

10.0.30319.1031

78,992

05-Feb-2015

13:15

SetupEngine.dll

10.0.30319.1031

811,152

05-Feb-2015

13:15

SetupUi.dll

10.0.30319.1031

296,584

05-Feb-2015

13:15

aspnet_wp.exe

4.0.30319.1031

41,616

05-Feb-2015

14:24

aspnet_wp.exe

4.0.30319.1031

33,424

05-Feb-2015

14:12

System.Web.Extensions.dll

4.0.30319.1031

1,867,440

05-Feb-2015

14:12

System.Web.dll

4.0.30319.1031

5,228,184

05-Feb-2015

14:23

System.Web.dll

4.0.30319.1031

5,258,392

05-Feb-2015

14:12

System.Web.Mobile.dll

4.0.30319.1031

835,752

05-Feb-2015

14:12

webengine.dll

4.0.30319.1031

16,528

05-Feb-2015

14:24

webengine.dll

4.0.30319.1031

14,992

05-Feb-2015

14:12

webengine4.dll

4.0.30319.1031

721,552

05-Feb-2015

14:24

webengine4.dll

4.0.30319.1031

496,272

05-Feb-2015

14:12

LDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.2056

261,792

05-Feb-2015

15:21

ServiceModelReg.exe

4.0.30319.2056

192,664

05-Feb-2015

15:00

Setup.exe

10.0.30319.2056

78,984

05-Feb-2015

14:59

SetupEngine.dll

10.0.30319.2056

811,152

05-Feb-2015

14:59

SetupUi.dll

10.0.30319.2056

296,584

05-Feb-2015

14:59

aspnet_wp.exe

4.0.30319.2056

41,616

05-Feb-2015

16:24

aspnet_wp.exe

4.0.30319.2056

33,424

05-Feb-2015

16:08

System.Web.Extensions.dll

4.0.30319.2056

1,867,432

05-Feb-2015

16:08

System.Web.dll

4.0.30319.2056

5,232,784

05-Feb-2015

16:24

System.Web.dll

4.0.30319.2056

5,263,000

05-Feb-2015

16:08

System.Web.Mobile.dll

4.0.30319.2056

835,744

05-Feb-2015

16:08

webengine.dll

4.0.30319.2056

16,536

05-Feb-2015

16:24

webengine.dll

4.0.30319.2056

14,992

05-Feb-2015

16:08

webengine4.dll

4.0.30319.2056

722,072

05-Feb-2015

16:24

webengine4.dll

4.0.30319.2056

496,272

05-Feb-2015

16:08

For all supported IA-64-based versions of systemsGDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.1031

545,432

05-Feb-2015

13:52

ServiceModelReg.exe

4.0.30319.1031

192,664

05-Feb-2015

13:16

Setup.exe

10.0.30319.1031

78,992

05-Feb-2015

13:15

SetupEngine.dll

10.0.30319.1031

811,152

05-Feb-2015

13:15

SetupUi.dll

10.0.30319.1031

296,584

05-Feb-2015

13:15

aspnet_wp.exe

4.0.30319.1031

81,040

05-Feb-2015

14:36

aspnet_wp.exe

4.0.30319.1031

33,424

05-Feb-2015

14:12

System.Web.Extensions.dll

4.0.30319.1031

1,867,440

05-Feb-2015

14:12

System.Web.dll

4.0.30319.1031

4,847,248

05-Feb-2015

14:35

System.Web.dll

4.0.30319.1031

5,258,392

05-Feb-2015

14:12

System.Web.Mobile.dll

4.0.30319.1031

835,752

05-Feb-2015

14:12

webengine.dll

4.0.30319.1031

26,256

05-Feb-2015

14:36

webengine.dll

4.0.30319.1031

14,992

05-Feb-2015

14:12

webengine4.dll

4.0.30319.1031

1,342,096

05-Feb-2015

14:36

webengine4.dll

4.0.30319.1031

496,272

05-Feb-2015

14:12

LDR service branch

File name

File version

File size

Date

Time

ServiceModelReg.exe

4.0.30319.2056

545,440

05-Feb-2015

15:46

ServiceModelReg.exe

4.0.30319.2056

192,664

05-Feb-2015

15:00

Setup.exe

10.0.30319.2056

78,984

05-Feb-2015

14:59

SetupEngine.dll

10.0.30319.2056

811,152

05-Feb-2015

14:59

SetupUi.dll

10.0.30319.2056

296,584

05-Feb-2015

14:59

aspnet_wp.exe

4.0.30319.2056

81,040

05-Feb-2015

16:40

aspnet_wp.exe

4.0.30319.2056

33,424

05-Feb-2015

16:08

System.Web.Extensions.dll

4.0.30319.2056

1,867,432

05-Feb-2015

16:08

System.Web.dll

4.0.30319.2056

4,851,864

05-Feb-2015

16:40

System.Web.dll

4.0.30319.2056

5,263,000

05-Feb-2015

16:08

System.Web.Mobile.dll

4.0.30319.2056

835,744

05-Feb-2015

16:08

webengine.dll

4.0.30319.2056

26,256

05-Feb-2015

16:40

webengine.dll

4.0.30319.2056

14,992

05-Feb-2015

16:08

webengine4.dll

4.0.30319.2056

1,343,128

05-Feb-2015

16:40

webengine4.dll

4.0.30319.2056

496,272

05-Feb-2015

16:08

Applies toThis article applies to the following:

  • Microsoft .NET Framework 4 when used with:

    • Windows Server 2008 R2 Service Pack 1

    • Windows 7 Service Pack 1

    • Windows Server 2008 Service Pack 2

    • Windows Vista Service Pack 2

    • Windows Server 2003 Service Pack 2

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.