MS14-053: Vulnerability in the .NET Framework could allow denial of service: September 9, 2014

Introduction

This update resolves a vulnerability in the Microsoft .NET Framework that could allow denial of service if an attacker sends a few specially crafted requests to an affected .NET-enabled website. By default, ASP.NET is not installed when the .NET Framework is installed on any supported edition of Windows. To be affected by the vulnerability, customers must manually install and enable ASP.NET by registering it with Internet Information Services (IIS).

Summary

Microsoft has released security bulletin MS14-053. Learn more about how to obtain the fixes that are included in this security bulletin: 

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

More Information

More information about this update

The following articles contain additional information about this update as it relates to individual product versions. The articles may contain information that is specific to the individual updates, such as download URLs, prerequisites, and command-line switches. 
The .NET Framework 4.5, the .NET Framework 4.5.1, and the .NET Framework 4.5.2
  • 2977765  MS14-053: Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: September 9, 2014
  • 2977766  MS14-053: Description of the security update for the .NET Framework 4.5, the .NET Framework 4.5.1, and the .NET Framework 4.5.2 for Windows 8, Windows RT, and Windows Server 2012: September 9, 2014
  • 2972216  MS14-053: Description of the security update for the .NET Framework 4.5, the .NET Framework 4.5.1, and the .NET Framework 4.5.2 for Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows Server 2008 R2 SP1: September 9, 2014
The .NET Framework 4
  • 2972215  MS14-053: Description of the security update for the .NET Framework 4 for Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: September 9, 2014
The .NET Framework 3.5.1
  • 2973112  MS14-053: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 9, 2014
  • 2972211  MS14-053: Description of the security update for the .NET Framework 3.5.1 for Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: September 9, 2014
The .NET Framework 3.5
  • 2973114  MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: September 9, 2014
  • 2972213  MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8.1 and Windows Server 2012 R2: September 9, 2014
  • 2973113  MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: September 9, 2014
  • 2972212  MS14-053: Description of the security update for the .NET Framework 3.5 for Windows 8 and Windows Server 2012: September 9, 2014
The .NET Framework 3.0
  • 2974269  MS14-053: Description of the security update for the .NET Framework 3.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: September 9, 2014
  • 2973115  MS14-053: Description of the security update for the .NET Framework 3.0 Service Pack 2 for Windows Server 2003 Service Pack 2: September 9, 2014
The .NET Framework 2.0
  • 2974268  MS14-053: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: September 9, 2014
  • 2972214  MS14-053: Description of the security update for the .NET Framework 2.0 Service Pack 2 for Windows Server 2003 Service Pack 2: September 9, 2014
The .NET Framework 1.1
  • 2972207  MS14-053: Description of the security update for the .NET Framework 1.1 Service Pack 1 for Windows Server 2003 Service Pack 2: September 9, 2014

Update replacement information

Update replacement information for each specific update is available in the Microsoft Knowledge Base articles that correspond to this update.
File hash information

Applies to

This article applies to the following:
  • The Microsoft .NET Framework 4.5.2 when used with:
    • Windows 8.1
    • Windows RT 8.1
    • Windows Server 2012 R2
    • Windows 8
    • Windows RT
    • Windows Server 2012
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
  • The Microsoft .NET Framework 4.5.1 when used with:
    • Windows 8.1
    • Windows RT 8.1
    • Windows Server 2012 R2
    • Windows 8
    • Windows RT
    • Windows Server 2012
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
  • The Microsoft .NET Framework 4.5 when used with:
    • Windows 8
    • Windows RT
    • Windows Server 2012
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
  • The Microsoft .NET Framework 4 when used with:
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows Server 2003 Service Pack 2
  • The Microsoft .NET Framework 3.5.1 when used with:
    • Windows 7 Service Pack 1
    • Windows Server 2008 R2 Service Pack 1
  • The Microsoft .NET Framework 3.5 when used with:
    • Windows 8.1
    • Windows RT 8.1
    • Windows Server 2012 R2
    • Windows 8
    • Windows RT
    • Windows Server 2012
  • The Microsoft .NET Framework 3.0 Service Pack 2 when used with:
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Windows Server 2003 Service Pack 2
  • The Microsoft .NET Framework 2.0 Service Pack 2 when used with:
    • Windows Vista Service Pack 2
    • Windows Server 2008 Service Pack 2
    • Microsoft Windows Server 2003 Service Pack 2
  • The Microsoft .NET Framework 1.1 Service Pack 1 when used with:
    • Windows Server 2003 Service Pack 2
Properties

Article ID: 2990931 - Last Review: Sep 9, 2014 - Revision: 1

Feedback