September 9, 2014 This security update has been re-released for release on Windows Update and contains some updated articles. We recommend that you apply this updated security update.

View products that this article applies to.

Introduction

This security update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege on a server system if a user views a specially crafted webpage by using a web browser that can run ASP.NET applications.

Summary

Microsoft has released security advisory 2905247. You can view the complete security advisory by going to the following Microsoft website:

http://technet.microsoft.com/security/advisory/2905247

How to obtain help and support for this update

Help installing updates: Support for Microsoft UpdateSecurity solutions for IT professionals: TechNet Security Troubleshooting and SupportHelp protect your computer that is running Windows from viruses and malware: Virus Solution and Security CenterLocal support according to your country: International Support

More Information

Installation information

Before you apply this update, make sure that you resolve any view state message authentication code (MAC) errors that you may have. For information about how to do this, see Resolving view state message authentication code (MAC) errors in the Microsoft Knowledge Base.

More information about this update

The following articles contain more information about this update as it relates to individual product versions. The articles may contain specific information to the individual updates such as a download URL, prerequisites, and command line switches.

Microsoft .NET Framework 4.5 and the .NET Framework 4.5.1

  • 2894855 Description of the security update for the .NET Framework 4.5 and the .NET Framework 4.5.1 on Windows 8, Windows RT, and Windows Server 2012: December 10, 2013 

  • 2894856 Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: December 10, 2013

  • 2894854 Description of the security update for the .NET Framework 4.5 and the .NET Framework 4.5.1 on Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1, Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: December 10, 2013 

Microsoft .NET Framework 4

  • 2894842 Description of the security update for the .NET Framework 4 on Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: December 10, 2013 

Microsoft .NET Framework 3.5.1

  • 2894844 Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: December 10, 2013

Microsoft .NET Framework 3.5

  • 2894852 Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: December 10, 2013

  • 2894851 Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: December 10, 2013

Microsoft .NET Framework 2.0

  • 2894847 Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: December 10, 2013

  • 2894843 Description of the security update for the .NET Framework 2.0 Service Pack 2 on Windows Server 2003: December 10, 2013

Microsoft .NET Framework 1.1

  • 2894845 Description of the security update for the .NET Framework 1.1 Service Pack 1 on Windows Server 2003 Service Pack 2 32-bit Edition: December 10, 2013

Update replacement information

Update replacement information for each specific update can be found in the Knowledge Base articles that correspond to this update.

File name

SHA1 hash

SHA256 hash

MSIPatchRegFix-AMD64.exe

5011CB29B096FB674A4795EE8FC2F7FDAD33863A

BA62C33DD90ECC3C945AE4F52EEEB2FA07D2C53FB975263B483D09D80F02230D

MSIPatchRegFix-IA64.exe

CB861EAF1F4CDFFAD5F83604C7250CD9EDD96433

61867793FC7556B79E5833CC18F493A5611EDE94E0D944575E89BAA76B223A0D

MSIPatchRegFix-X86.exe

94A84B80B8B45A1AC53A0E5D085513DA0F099655

C83C5EE1D4FBFF5260A7D984471EAF4C6004431C21B4F661018BDB92CC124290

NDP20SP2-KB2894843-IA64.exe

14210062F040B05D7AC5606AD47DB9D3A6017706

F9D5AD0A08E0368CB959649BB1AD5B526999E0FDBC61B8EB98D7972CD2AA4B3E

NDP20SP2-KB2894843-x64.exe

579AFBD9190E1DD2FE50B8C5576AD4B932121C26

B408D323EF2F3D94D1F57C39EB1DC15CF67AF668CFF3CC678A32332980D699AC

NDP20SP2-KB2894843-x86.exe

36228A0825744E86A31A0D0D020ADA3B2D0DA9FA

A9B45B58AA6B37A339C0B90911DC0944B4C8B668DEA855759E32CB7538A1413F

NDP40-KB2894842-IA64.exe

248E1BD29794E50A931946DD70FA6F4360158FE1

45FD2A721E24C9CC86E1B1AC80D12D338A50ED8E46096AD592E256300A01C19A

NDP40-KB2894842-x64.exe

B417314336401EAFAEA20D771E4C37AC3075AC58

4B4D44F7FDD2D08343BA74C1E98F40E6DAE3653E4B910C05A843932F72D071D8

NDP40-KB2894842-x86.exe

10950C90D521C6968EDF267C890DE6DDD0C2B114

E57CE083E6A2F30780467648601D97BA7414E87DECFE3696B40115162F26E3AA

NDP45-KB2894849-x64.exe

A40B8E5DB56B7082D74AAFDD3CE232A2108C7E6C

B26FFCB9458113486DC268791EDE6D057C4057BBB43651C4E78BEF627E8ED136

NDP45-KB2894849-x86.exe

9A83CB551D62A73C30732DA2B38BFFDC90B3D753

95B2AA9C2609F719C248FCAD45F53B6650A2206C8BFDC9F26B0D9663243073D3

NDP45-KB2894854-x64.exe

9ED6490DB0AB643D622089226FFFF898539535D3

87A2CE7C04C4B2089B710DCF4298A01E5ACC70112C30291764A7CE7A12F7194F

NDP45-KB2894854-x86.exe

8340A11457781186566E6CB9D4BEAF6BE5AA7559

0BA44647620C1813EF1EC11556B5722DA32DADE18C014AC952D6650D643141A6

NDP45-KB2895210-x64.exe

E6EE3FFF616938A34E5909AE2224BACCB4455925

7D6B27AC1A4EF62296AF628EC32FC09B6C67C5A57549EF5A6824DB67ACCA85B4

NDP45-KB2895210-x86.exe

031A840ABDE5412785D9947F2B23B90AE34236FE

19ACBF86CB8F64DD332BEE3E9745B6162C5238C6BF67EA5628BAF560AB52A436

Windows6.0-KB2894847-ia64.msu

4450A143F0A0A1742EDD39B7C19D5BBEB2B618C5

06B85260FDA72B6F0E72E849FF91B337FB8760740B3683960FFB09DF335118F7

Windows6.0-KB2894847-x64.msu

7719EF17783CA4AE687CAB0DCB24D6567B71AA43

230D9D7B668EF64FE12246C23E4D4D90DB99D13FAA534F2DA8C45377CBD2DBCA

Windows6.0-KB2894847-x86.msu

9D672B6FD6DAA1CA7C20051DE91FEE613F540BDC

8CEDF33EA95966E383903E6CB63B3ED60E48317F0F2120972D077201B54CD860

Windows6.0-KB980842-ia64.msu

2A2A67B37490C495E23B1EC709BACA49D06F0272

9494EDBFFE5DF90060C253C6E185DC2EE9739C144BCF1B25C2F42914078752EC

Windows6.0-KB980842-x64.msu

56CCB4131E94F0E4740AC65D54603AD9A2F32FDE

CC84E048D5B9A0F35F9FE981C1F0FCA67261D0C07B026B18B5626DE9ED97C6F1

Windows6.0-KB980842-x86.msu

A6FC223B39B42789FF7A319AFEFF86DF2913D187

C41C2294AC8CEDE7308711183F8E0FA5BE9208ACBEEF5DB347BE6E0C8AF2E4AA

Windows6.1-KB2894844-ia64.msu

4D9F597BBF41BD12AC6303117F57E4AAB198F0E6

3C872A21600508DAE46CF88C20CFC154132A08512DC9EA972C7592694AC29C66

Windows6.1-KB2894844-x64.msu

71B051D4B2EAE12423868E28B0E5B04A9E10C048

C6BE08B0D79070DEC45A5BF122142B695261F3AB2D56E4F3265D54B2A607B39B

Windows6.1-KB2894844-x86.msu

D628CB41A17B6CEE85C3BDF3E4612219FB7257BA

AA6E2E75F19339039763EA68219CEF57EE807CE35B7A2FE158E904BA467047BA

Windows8-RT-KB2894850-x64.msu

AA8C10C10488D8C42A8DB91F0EBA8B6F67C05BAC

3B62008A3F76C2E9EEF0C776B7D0D076CD9066258803EAB4EDB86B6705DE715B

Windows8-RT-KB2894850-x86.msu

86514238227E6DC2186AC9CCE7C4347E295853E0

193911A4C1CBDE07635BAE3041E3C725DDF741FE5AB9643ED86A8AFBFAF4FDAC

Windows8-RT-KB2894851-x64.msu

4A9252475F4767841B6A4464BBE54E2050785112

3331943040886414C2E426B0EC8B083FBDD16D2358FBA7B9DB24297CB06C4937

Windows8-RT-KB2894851-x86.msu

AB485A340C761CF1B95AA87AA7323E28DAAEF6DE

94617995EC5DD8E4D802B3D8B99C203D0B0E9DA9A6033846DBBF517B082565B6

Windows8-RT-KB2894855-x64.msu

1E40693415E33C1C5E4D214B700881BD111F528F

7C3E0BA87D94F50E3B47710C12A1986C183451645D100A1A7BB02E387D705BF0

Windows8-RT-KB2894855-x86.msu

1A590394EF1E3585D3892B8F046723051F7A132C

21B3ED345036AE3A39B94012885A38F8B87671197D82B0F552083A20A1164A61

Windows8.1-KB2894852-x64.msu

632006854D9C3709180D7C864CABC7D1661F8240

84DDA0AB9C8C9D546DDAAFB29557DAE762E463C8B381744A74AEC5BCBB15E8F3

Windows8.1-KB2894852-x86.msu

B5B52A14663887A6D51E34C4F5743F215CB0D3A6

77C01599C5C41EA4DDAD7FF951287A817FCEAE94B83EFB71882A76A2743B0C82

Windows8.1-KB2894856-x64.msu

A899C1F0AEC9C21703840A618FF535905AC2F0D2

B743D7B772444DD94EBC8F8ACD37CB4CC0CA696B9AAE551BA2450FD455B84923

Windows8.1-KB2894856-x86.msu

E7ADE88F9C46EA31788DAA0AC7F3A5B539466B47

E1E1DFB6C5A38527939B9C61DDB4A0B99E6E24DC41E0D2CC8596C712C8CB9E66

WindowsServer2003-KB2894845-x86-CHS.exe

7C60B0C99631644F182E8192143B9A0A13D78222

3B40C3B4804595975B122D5206C8FC1309D92BD353EBAD0941584EDEBF6C8681

WindowsServer2003-KB2894845-x86-CHT.exe

B4F363D59ACBB71A539608B19D78B8F33C7CC107

F83F94F549D168B97E626046B6CB9986B04014E91BB5A202C75B302B639F3947

WindowsServer2003-KB2894845-x86-CSY.exe

DEBD244429E19FAA66EDB6D54E877D3D8EB2B4C7

76DF450E1695F6CC859FEACCFCC70166BE951CC7024BE26F525A99B00E553DF6

WindowsServer2003-KB2894845-x86-DEU.exe

15ED98B8F252A0DB53D780CD9E1540D1F202BEAB

15EA4B791D671211B1ACA1DEAE418B26B84E5D6DD5166CBDB97682BA8C13ED57

WindowsServer2003-KB2894845-x86-ENU.exe

045F30403D396ACFFFBCF7E37D60D435548FCC1C

C83921E3C15A83C569A5E11955189FF76998EAF333DF9A6B64C979C10B11A940

WindowsServer2003-KB2894845-x86-ESN.exe

E34687DA9F43D6526486F75C6D5FA4857FFA66F5

238CADA16242B7608E08011B94AC69E3512CDBCD3020F98FC8BC64CEBF56F938

WindowsServer2003-KB2894845-x86-FRA.exe

DB566E95EF8577C8356B6CA4820A3165AB438C79

2A82E5B1FE99BCD43C932B2299D5B2DA6142D2378E1D13648C8C50A7BCFBF708

WindowsServer2003-KB2894845-x86-HUN.exe

2AAC63376EAEBEA61CBE9E4EB037EC1ECADF5E61

043CD3790BC43FE1C1C920C0F9AE2D75FE4054312D7F09CFFDF19664A821127A

WindowsServer2003-KB2894845-x86-ITA.exe

ECA206819B6C8F52FE455B377AF16F8986020B29

334573222D087440E5A9E2BB25CACE1151D8089DBE907F2B3F450B5B73FCB2F1

WindowsServer2003-KB2894845-x86-JPN.exe

97021525FF5867DF5E002A6675E7AA8358C15D62

84B88083611541C31ADA2B0F4470E43BF11EF98DC1E60768442CD072CF3E4D1E

WindowsServer2003-KB2894845-x86-KOR.exe

999622189582238932B897A333473C2AA5155503

9034802A24310ECFCB1ABE1A14C479FD21CC66EEAD93EF9BD693BA19AFE09A10

WindowsServer2003-KB2894845-x86-NLD.exe

D49A7A3007A830210E9D5D36B63FBA90434D013F

BE1A0427BB3C7C357A1003D78AC2594F2B2FA8ACFFBD05565AF65223C75C2A71

WindowsServer2003-KB2894845-x86-PLK.exe

05A08E5BA2810F932AB1639FB523CDB72B2CA263

B680E1053E19D3D612A7AF1B38C348A30D46DBED6A02398247B297F5ADC9EE2F

WindowsServer2003-KB2894845-x86-PTB.exe

E9E2293EAA5A83B4AAA47F4600BAD1E227A8A88F

9101CDFA8FBF4CE6BD05B5CFE5746DEBDB235935C304B456C6253D4999AD513F

WindowsServer2003-KB2894845-x86-PTG.exe

2DCB03D6A7BDDB4F975EF31E611633578E7C0084

D44463C5F370FE9F3865A33D80A8B02069AA565D914E5B3C5898A774CA250A7B

WindowsServer2003-KB2894845-x86-RUS.exe

D335C996894948A431C55E0A83B72AE4DF4C6095

EE9AB4BD5DF3E09A3530299908E5651BD5BC5C1EF420B23131033BCB2033C441

WindowsServer2003-KB2894845-x86-SVE.exe

D5461A2AEA4D89474374C262654E3BF2192A323E

28F4C14F94DA7CC06EC1C590A481F184E2076A87610DF9C39E65F303EB4F0D92

WindowsServer2003-KB2894845-x86-TRK.exe

7B8AA1A3B6DC52EDA6BCED9E39C04DC58F79DFAF

13E1F9DD1A60621057F28EA48BDC7E70D0D4E064412387578AAF783BA15A438C

Applies toThis article applies to the following:

  • Microsoft .NET Framework 4.5.1 when used with:

    • Windows 8.1

    • Windows RT 8.1

    • Windows Server 2012 R2

    • Windows 8

    • Windows RT

    • Windows Server 2012

    • Windows 7 Service Pack 1

    • Windows Server 2008 R2 Service Pack 1

    • Windows Vista Service Pack 2

    • Windows Server 2008 Service Pack 2

  • Microsoft .NET Framework 4.5 when used with:

    • Windows 8

    • Windows RT

    • Windows Server 2012

    • Windows 7 Service Pack 1

    • Windows Server 2008 R2 Service Pack 1

    • Windows Vista Service Pack 2

    • Windows Server 2008 Service Pack 2

  • Microsoft .NET Framework 4 when used with:

    • Windows 7 Service Pack 1

    • Windows Server 2008 R2 Service Pack 1

    • Windows Vista Service Pack 2

    • Windows Server 2008 Service Pack 2

    • Windows Server 2003 Service Pack 2

  • Microsoft .NET Framework 3.5.1 when used with:

    • Windows 7 Service Pack 1

    • Windows Server 2008 R2 Service Pack 1

  • Microsoft .NET Framework 3.5 when used with:

    • Windows 8

    • Windows Server 2012

  • Microsoft .NET Framework 2.0 Service Pack 2 when used with:

    • Windows Vista Service Pack 2

    • Windows Server 2008 Service Pack 2

    • Windows Server 2003 Service Pack 2

  • Microsoft .NET Framework 1.1 Service Pack 1 when used with:

    • Windows Server 2003 Service Pack 2 32-bit Edition

Facebook LinkedIn Email

Need more help?

Want more options?

Discover Community

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Microsoft 365 subscription benefits

Microsoft 365 training

Microsoft security

Accessibility center

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Ask the Microsoft Community

Microsoft Tech Community

Windows Insiders

Microsoft 365 Insiders