Description of the Security Only update for .NET Framework 4.5.2 for Windows Server 2012 (KB 4480075)

Summary

This security update resolves a vulnerability in Microsoft .NET Framework that may cause an information disclosure that allows bypassing Cross-origin Resource Sharing (CORS) configurations.

An attacker who successfully exploits this vulnerability could retrieve from a web application content that is usually restricted.

This security update addresses the vulnerability by enforcing CORS configuration to prevent it from being bypassed.

To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2019-0545.

Important

If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Additional information about this security update

For more information about this security update as it relates to Windows Server 2012, see the following article in the Microsoft Knowledge Base:

4481483 Security Only updates for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 (KB 4481483)

How to obtain and install the update

Method 1: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog.

Method 2: Windows Software Update Services (WSUS)

On your WSUS server, follow these steps:

Select Start, select Administrative Tools, and then select Microsoft Windows Server Update Services 3.0.
Expand ComputerName, and then select Action.
Select Import Updates.
WSUS opens a browser window in which you may be prompted to install an ActiveX control. You must install the ActiveX control to continue.
After the ActiveX control is installed, you see the Microsoft Update Catalog screen. Type 4481483 in the Search box, and then select Search.
Locate the .NET Framework packages that match the operating systems, languages, and processors in your environment. Select Add to add them to your basket.
After you select all the packages that you require, select View Basket.
To import the packages to your WSUS server, select Import.
After the packages are imported, select Close to return to WSUS.

The updates are now available for installation through WSUS.

Update deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:

20190108 Security update deployment information: January 8, 2019

Update removal information

Note We do not recommend that you remove any security update. To remove this update, use the Programs and Features item in Control Panel.

Update restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement information

This update replaces updates 3142032 and 2978042.

File information

File hash

File name	SHA1 hash	SHA256 hash
Windows8-RT-KB4480075-x86.msu	D4008D3E459F2DE63D7A4DAEFE727919E96CEA0F	122D5D0D3A8B17FC8877376B49C67CD98B339C3075DBBF7E77E290A5B87F041B
Windows8-RT-KB4480075-x64.msu	93ADEC8F4CBB10E1F996110BDECAD4D669036DE4	CD141E75339878BB37ED9DE2A66FDBE20B7286E88E4E18FD101123B473C80D01

File attributes for all supported x86-based systems

The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

File name	File version	File size	Date	Time
system.resources.dll	4.0.30319.36341	289,472	15-Nov-2017	00:53
system.resources.dll	4.0.30319.36341	250,048	15-Nov-2017	00:54
system.resources.dll	4.0.30319.36341	244,928	15-Nov-2017	00:53
system.resources.dll	4.0.30319.36341	256,704	15-Nov-2017	00:54
system.resources.dll	4.0.30319.36341	350,400	15-Nov-2017	00:53
system.resources.dll	4.0.30319.36341	253,632	15-Nov-2017	00:54
system.resources.dll	4.0.30319.36341	244,928	15-Nov-2017	00:53
system.resources.dll	4.0.30319.36341	259,264	15-Nov-2017	00:54
system.resources.dll	4.0.30319.36341	270,528	15-Nov-2017	00:52
system.resources.dll	4.0.30319.36341	262,336	15-Nov-2017	00:54
system.resources.dll	4.0.30319.36341	251,584	15-Nov-2017	00:53
system.resources.dll	4.0.30319.36341	283,840	15-Nov-2017	00:57
system.resources.dll	4.0.30319.36341	261,824	15-Nov-2017	00:55
system.resources.dll	4.0.30319.36341	238,272	15-Nov-2017	00:54
system.resources.dll	4.0.30319.36341	251,584	15-Nov-2017	00:54
system.resources.dll	4.0.30319.36341	254,656	15-Nov-2017	00:54
system.resources.dll	4.0.30319.36341	252,096	15-Nov-2017	00:53
system.resources.dll	4.0.30319.36341	252,608	15-Nov-2017	00:55
system.resources.dll	4.0.30319.36341	320,704	15-Nov-2017	00:53
system.resources.dll	4.0.30319.36341	243,392	15-Nov-2017	00:55
system.resources.dll	4.0.30319.36341	244,416	15-Nov-2017	00:54
system.resources.dll	4.0.30319.36341	223,936	15-Nov-2017	00:54
system.resources.dll	4.0.30319.36341	226,496	15-Nov-2017	00:54
system.dll	4.0.30319.36490	3,490,120	04-Dec-2018	14:06

File attributes for all supported x64-based systems