MS14-009: Vulnerabilities in the .NET Framework could allow elevation of privilege: February 11, 2014

Introduction

This update resolves vulnerabilities that could allow elevation of privilege if a user visits a specially crafted website or a website that contains specially crafted web content.

Summary

Microsoft has released security bulletin MS14-009. Learn more about how to obtain the fixes that are included in this security bulletin:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

More Information

Known issues and additional information about this update

After you install one of these security updates, marshaling of reflection types may not work as expected over DCOM. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:
2934830 Marshaling of reflection types may not work over DCOM after you install a security update from security bulletin MS14-009

The following articles contain additional information about this update as it relates to individual product versions. The articles may contain specific information about the individual updates such as a download URL, prerequisites, and command-line switches.

Microsoft .NET Framework 4.5.1
  • 2901128 MS14-009: Description of the security update for the .NET Framework 4.5.1 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: February 11, 2014
  • 2898871 MS14-009: Description of the security update for the .NET Framework 4.5.1 for Windows 8, Windows RT 8.1, and Windows Server 2012 R2: February 11, 2014
  • 2901127 MS14-009: Description of the security update for the .NET Framework 4.5.1 for Windows 8, Windows RT, and Windows Server 2012: February 11, 2014
  • 2898870 MS14-009: Description of the security update for the .NET Framework 4.5.1 for Windows 8, Windows RT, and Windows Server 2012: February 11, 2014
  • 2901126 MS14-009: Description of the security update for the .NET Framework 4.5.1 for Windows Vista Service Pack 2, Windows Server 2008 Service Pack 2, Windows 7 Service Pack 1, and Windows Server 2008 R2 Service Pack 1: February 11, 2014
  • 2898869 MS14-009: Description of the security update for the .NET Framework 4.5.1 for Windows Vista Service Pack 2, Windows Server 2008 Service Pack 2, Windows 7 Service Pack 1, and Windows Server 2008 R2 Service Pack 1: February 11, 2014

Microsoft .NET Framework 4.5
  • 2901119 MS14-009: Description of the security update for the .NET Framework 4.5 for Windows 8, Windows RT, and Windows Server 2012: February 11, 2014
  • 2898865 MS14-009: Description of the security update for the .NET Framework 4.5 for Windows 8, Windows RT, and Windows Server 2012: February 11, 2014
  • 2901118 MS14-009: Description of the security update for the .NET Framework 4.5 for Windows Vista Service Pack 2, Windows Server 2008 Service Pack 2, Windows 7 Service Pack 1, and Windows Server 2008 R2 Service Pack 1: February 11, 2014
  • 2898864 MS14-009: Description of the security update for the .NET Framework 4.5 for Windows Vista Service Pack 2, Windows Server 2008 Service Pack 2, Windows 7 Service Pack 1, and Windows Server 2008 R2 Service Pack 1: February 11, 2014
Microsoft .NET Framework 4
  • 2901110 MS14-009: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: February 11, 2014
  • 2898855 MS14-009: Description of the security update for the .NET Framework 4 for Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: February 11, 2014
Microsoft .NET Framework 3.5.1
  • 2901112 MS14-009: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: February 11, 2014
  • 2911501 MS14-009: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: February 11, 2014
  • 2898857 MS14-009: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: February 11, 2014
Microsoft .NET Framework 3.5
  • 2901125 MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: February 11, 2014
  • 2898868 MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: February 11, 2014
  • 2901120 MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: February 11, 2014
  • 2898866 MS14-009: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: February 11, 2014
Microsoft .NET Framework 2.0
  • 2901113 MS14-009: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: February 11, 2014
  • 2911502 MS14-009: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: February 11, 2014
  • 2898858 MS14-009: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: February 11, 2014
  • 2901111 MS14-009: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows XP Service Pack 3 and Windows Server 2003 Service Pack 2: February 11, 2014
  • 2898856 MS14-009: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows XP Service Pack 3 and Windows Server 2003 Service Pack 2: February 11, 2014
Microsoft .NET Framework 1.1
  • 2901115 MS14-009: Description of the security update for the .NET Framework 1.1 Service Pack 1 for Windows Server 2003 Service Pack 2: February 11, 2014
  • 2898860 MS14-009: Description of the security update for the .NET Framework 1.1 Service Pack 1 for Windows Server 2003 Service Pack 2: February 11, 2014
Microsoft .NET Framework 1.0
  • 2904878 MS14-009: Description of the security update for the .NET Framework 1.0 Service Pack 3 for Windows XP Service Pack 3 Tablet PC Edition and Windows XP Service Pack 3 Media Center Edition: February 11, 2014

Update replacement information

Update replacement information for each specific update can be found in the Knowledge Base articles that correspond to this update.
File hash information

Applies to

This article applies to the following:
  • Microsoft .NET Framework 4.5.1 when used with:
    • Windows 8.1
    • Windows RT 8.1
    • Windows Server 2012 R2
    • Windows 8
    • Windows RT
    • Windows Server 2012
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
  • Microsoft .NET Framework 4.5 when used with:
    • Windows 8
    • Windows RT
    • Windows Server 2012
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
  • Microsoft .NET Framework 4 when used with:
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows XP Service Pack 3
    • Windows Server 2003 Service Pack 2
  • Microsoft .NET Framework 3.5.1 when used with:
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
  • Microsoft .NET Framework 3.5 when used with:
    • Windows 8.1
    • Windows Server 2012 R2
    • Windows 8
    • Windows Server 2012
  • Microsoft .NET Framework 2.0 Service Pack 2 when used with:
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows XP Service Pack 3
    • Windows Server 2003 Service Pack 2
  • Microsoft .NET Framework 1.1 Service Pack 1 when used with:
    • Windows Server 2003 Service Pack 2
  • Microsoft .NET Framework 1.0 Service Pack 3 when used with:
    • Windows XP Service Pack 3 Tablet PC Edition
    • Windows XP Service Pack 3 Media Center Edition
Properties

Article ID: 2916607 - Last Review: Feb 18, 2014 - Revision: 1

Feedback