Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 (KB4601057)

Applies to:

Microsoft .NET Framework 4.8

Summary

Security Improvements

This security update addresses a denial of service vulnerability in .NET Framework. For more information please see CVE-2021-24111.

Quality Improvements

ASP.NET	- Addresses an issue where after installing the update released on October 20th, some ASP.Net applications fail during precompilation – likely with a message that contains the words “Error ASPCONFIG.”
WPF₁	- Addresses a hang when scrolling to the end of a TreeView, when layout rounding is enabled and DPI scaling is not 100%.
CLR	- Improves the reliability of automatic Native Image generation task.

₁ Windows Presentation Foundation (WPF)

Known issues in this update

Symptom

After installing this update, WPF apps may crash with a callstack similar to

Exception Info: System.NullReferenceException at System.Windows.Interop.HwndMouseInputProvider.HasCustomChrome(System.Windows.Interop.HwndSource, RECT ByRef)
at System.Windows.Interop.HwndMouseInputProvider.GetEffectiveClientRect(IntPtr)
at System.Windows.Interop.HwndMouseInputProvider.PossiblyDeactivate(IntPtr, Boolean)
at System.Windows.Interop.HwndMouseInputProvider.Dispose()

This occurs when disposing an HwndSource whose RootVisual is null, a situation that arises in Visual Studio when docking or splitting windows, and could arise in other apps.

Workaround

To work around this problem, set two AppContext switches using one of the methods described in AppContext Class (System) under the heading “AppContext for library consumers”. The switches are named Switch.System.Windows.Interop.MouseInput.OptOutOfMoveToChromedWindowFix and Switch.System.Windows.Interop.MouseInput.DoNotOptOutOfMoveToChromedWindowFix and both should be set to “true”. The first switch avoids the crash, but re-introduces the bug fixed in the KBs. The second switch is currently ignored, but will be recognized in a future .NET update that contains a fix for the null-reference crash; it restores the original bug fix.

For example, using the app.config file method to apply the workaround at application scope:

<AppContextSwitchOverrides value="Switch.System.Windows.Interop.MouseInput.OptOutOfMoveToChromedWindowFix=true; Switch.System.Windows.Interop.MouseInput.DoNotOptOutOfMoveToChromedWindowFix=true " />

Additional information about this update

The following articles contain additional information about this update as it relates to individual product versions.

4603003 Description of the Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4603003)

How to obtain and install the update

Before installing this update

Prerequisite:

To apply this update, you must have .NET Framework 4.8 installed.

Install this update

Release Channel	Available	Next Step
Windows Update and Microsoft Update	Yes	None. This update will be downloaded and installed automatically from Windows Update.
Microsoft Update Catalog	Yes	To get the standalone package for this update, go to the Microsoft Update Catalog website.
Windows Server Update Services (WSUS)	Yes	This update will automatically sync with WSUS if you configure Products and Classifications as follows: Product:Windows Server 2012 Classification: Security Updates

Restart requirement

You must restart the computer after you apply this update if any affected files are being used. We recommend that you exit all .NET Framework-based applications before you apply this update.

Update deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:

20210209 Security update deployment information: February 9, 2021

Update removal information

Note We do not recommend that you remove any security update. To remove this update, use the Programs and Features item in Control Panel.

Update restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement information

This update replaces previously released updates 4598501 and 4579978.

File Information

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Presentationframework-systemdata.dll	4.8.4330.0	17,800	05-Jan-2021	01:30	x86	None	Not applicable
Presentationframework.dll	4.8.4330.0	6,270,336	05-Jan-2021	01:30	x86	None	Not applicable
Reachframework.dll	4.8.4110.0	677,656	04-Dec-2019	02:55	x86	None	Not applicable
Smdiagnostics.dll	4.8.4261.0	66,328	02-Sep-2020	21:05	x86	None	Not applicable
Smsvchost.exe	4.8.4121.0	139,056	07-Dec-2019	06:03	x86	None	Not applicable
System.activities.presentation.dll	4.8.4150.0	2,127,128	09-Jan-2020	19:46	x86	None	Not applicable
System.activities.dll	4.8.4261.0	1,526,528	02-Sep-2020	21:05	x86	None	Not applicable
System.configuration.dll	4.8.4190.0	421,536	05-Jun-2020	05:04	x86	None	Not applicable
System.core.dll	4.8.4330.0	1,549,080	05-Jan-2021	01:30	x86	None	Not applicable
System.deployment.dll	4.8.4290.0	1,593,624	30-Sep-2020	01:40	x86	None	Not applicable
System.drawing.design.dll	4.8.4210.0	125,192	30-Jun-2020	01:55	x86	None	Not applicable
System.identitymodel.services.dll	4.8.4261.0	191,352	02-Sep-2020	21:05	x86	None	Not applicable
System.identitymodel.dll	4.8.4261.0	1,086,744	02-Sep-2020	21:05	x86	None	Not applicable
System.net.sockets.dll	4.8.4121.0	30,360	07-Dec-2019	06:03	x86	None	Not applicable
System.runtime.serialization.dll	4.8.4261.0	1,047,312	02-Sep-2020	21:05	x86	None	Not applicable
System.security.dll	4.8.4261.0	320,280	02-Sep-2020	21:05	x86	None	Not applicable
System.servicemodel.activities.dll	4.8.4261.0	555,384	02-Sep-2020	21:05	x86	None	Not applicable
System.servicemodel.channels.dll	4.8.4261.0	150,904	02-Sep-2020	21:05	x86	None	Not applicable
System.servicemodel.discovery.dll	4.8.4261.0	301,432	02-Sep-2020	21:05	x86	None	Not applicable
System.servicemodel.internals.dll	4.8.4261.0	246,528	02-Sep-2020	21:05	x86	None	Not applicable
System.servicemodel.washosting.dll	4.8.4261.0	33,144	02-Sep-2020	21:05	x86	None	Not applicable
System.servicemodel.web.dll	4.8.4261.0	321,792	02-Sep-2020	21:05	x86	None	Not applicable
System.servicemodel.dll	4.8.4261.0	6,383,896	02-Sep-2020	21:05	x86	None	Not applicable
System.speech.dll	4.8.4210.0	676,736	30-Jun-2020	01:55	x86	SPE	MSIL_SYSTEM.SP
System.web.applicationservices.dll	4.8.4330.0	63,768	05-Jan-2021	01:30	x86	None	Not applicable
System.web.extensions.dll	4.8.4330.0	1,842,448	05-Jan-2021	01:30	x86	None	Not applicable
System.windows.controls.ribbon.dll	4.8.4330.0	743,816	05-Jan-2021	01:30	x86	None	Not applicable
System.windows.forms.datavisualization.dll	4.8.4210.0	1,712,512	30-Jun-2020	01:55	x86	None	Not applicable
System.windows.forms.dll	4.8.4290.0	5,914,880	30-Sep-2020	01:40	x86	None	Not applicable
System.workflow.activities.dll	4.8.4110.0	1,051,112	04-Dec-2019	02:55	x86	None	Not applicable
System.workflow.componentmodel.dll	4.8.4110.0	1,557,272	04-Dec-2019	02:55	x86	None	Not applicable
System.workflow.runtime.dll	4.8.4110.0	503,064	04-Dec-2019	02:55	x86	None	Not applicable
System.xaml.dll	4.8.4330.0	632,088	05-Jan-2021	01:30	x86	None	Not applicable
System.dll	4.8.4311.0	3,552,536	25-Nov-2020	04:49	x86	None	Not applicable
Uiautomationclientsideproviders.dll	4.8.4330.0	354,184	05-Jan-2021	01:30	x86	None	Not applicable
Uiautomationclient.dll	4.8.4330.0	170,880	05-Jan-2021	01:30	x86	None	Not applicable
Uiautomationprovider.dll	4.8.4330.0	41,856	05-Jan-2021	01:30	x86	None	Not applicable
Uiautomationtypes.dll	4.8.4330.0	215,944	05-Jan-2021	01:30	x86	None	Not applicable
Windowsbase.dll	4.8.4330.0	1,298,824	05-Jan-2021	01:30	x86	None	Not applicable
Windowsformsintegration.dll	4.8.4150.0	105,240	09-Jan-2020	19:46	x86	None	Not applicable
Mscorlib.dll	4.8.4311.0	5,670,792	25-Nov-2020	04:49	x86	None	Not applicable
Normidna.nlp	Not applicable	59,342	26-Mar-2020	22:27	Not applicable	None	Not applicable
Normnfc.nlp	Not applicable	47,076	26-Mar-2020	22:27	Not applicable	None	Not applicable
Normnfd.nlp	Not applicable	40,566	26-Mar-2020	22:27	Not applicable	None	Not applicable
Normnfkc.nlp	Not applicable	67,808	26-Mar-2020	22:27	Not applicable	None	Not applicable
Normnfkd.nlp	Not applicable	61,718	26-Mar-2020	22:27	Not applicable	None	Not applicable
Aspnet_perf.dll	4.8.4330.0	36,232	05-Jan-2021	01:30	x86	SPN	X86_NETFX4-ASP
Aspnet_state_perf.h	Not applicable	318	04-Jan-2021	23:56	Not applicable	SPN	X86_NETFX4-ASP
Aspnet_state_perf.ini	Not applicable	42,996	05-Jan-2021	01:31	Not applicable	SPN	X86_NETFX4-ASP
Aspnet_wp.exe	4.8.4330.0	39,824	05-Jan-2021	01:30	x86	SPN	X86_NETFX4-ASP
Clrjit.dll	4.8.4311.0	554,888	25-Nov-2020	04:49	x86	None	Not applicable
Clr.dll	4.8.4311.0	8,037,768	25-Nov-2020	04:49	x86	None	Not applicable
Dfdll.dll	4.8.4290.0	178,040	30-Sep-2020	01:40	x86	None	Not applicable
Globalmonospace.compositefont	Not applicable	26,040	03-Sep-2020	20:09	Not applicable	SPA	X86_NETFX4-GLOBALMONOSP
Globalsansserif.compositefont	Not applicable	26,489	03-Sep-2020	20:09	Not applicable	None	Not applicable
Globalserif.compositefont	Not applicable	29,779	03-Sep-2020	20:09	Not applicable	None	Not applicable
Globaluserinterface.compositefont	Not applicable	264,986	24-Sep-2020	02:17	Not applicable	None	Not applicable
Mscordacwks.dll	4.8.4311.0	1,307,528	25-Nov-2020	04:49	x86	None	Not applicable
Mscordbi.dll	4.8.4311.0	1,188,744	25-Nov-2020	04:49	x86	None	Not applicable
Mscoreei.dll	4.8.4180.0	581,920	26-Mar-2020	23:11	x86	None	Not applicable
Mscorsvc.dll	4.8.4330.0	454,024	05-Jan-2021	01:30	x86	None	Not applicable
Mscorsvw.exe	4.8.4330.0	125,872	05-Jan-2021	01:30	x86	None	Not applicable
Ngentask.exe	4.8.4330.0	79,824	05-Jan-2021	01:30	x86	None	Not applicable
Ngen.exe	4.8.4330.0	144,344	05-Jan-2021	01:30	x86	None	Not applicable
Penimc.dll	14.8.4330.0	11,656	05-Jan-2021	01:30	x86	None	Not applicable
Penimc2_v0400.dll	4.8.4330.0	99,720	05-Jan-2021	01:30	x86	None	Not applicable
Penimc_v0400.dll	4.8.4330.0	18,312	05-Jan-2021	01:30	x86	None	Not applicable
Peverify.dll	4.8.4311.0	182,664	25-Nov-2020	04:49	x86	None	Not applicable
Presentationhost_v0400.dll.mui	4.8.4330.0	77,704	05-Jan-2021	01:30	Not applicable	None	Not applicable
Presentationhost_v0400.dll	4.8.4330.0	233,864	05-Jan-2021	01:30	x86	None	Not applicable
Presentationnative_v0400.dll	4.8.4330.0	923,016	05-Jan-2021	01:30	x86	None	Not applicable
Servicemodel.mof	Not applicable	88,383	08-Nov-2019	23:28	Not applicable	None	Not applicable
Servicemodel.mof.uninstall	Not applicable	896	08-Nov-2019	23:28	Not applicable	None	Not applicable
Servicemonikersupport.dll	4.8.4261.0	24,456	02-Sep-2020	21:05	x86	None	Not applicable
_smsvchostperfcounters.h	Not applicable	702	06-Dec-2019	22:20	Not applicable	None	Not applicable
_smsvchostperfcounters.ini	Not applicable	133,894	07-Dec-2019	06:04	Not applicable	None	Not applicable
_smsvchostperfcounters_d.ini	Not applicable	39	08-Nov-2019	03:11	Not applicable	None	Not applicable
Smsvchost.exe.config	Not applicable	2,262	25-Jul-2019	21:42	Not applicable	None	Not applicable
Sos.dll	4.8.4311.0	767,368	25-Nov-2020	04:49	x86	None	Not applicable
System.core.dll	4.8.4330.0	1,549,080	05-Jan-2021	01:30	x86	None	Not applicable
System.web.extensions.dll	4.8.4330.0	1,842,448	05-Jan-2021	01:30	x86	None	Not applicable
System.windows.forms.datavisualization.dll	4.8.4210.0	1,712,512	30-Jun-2020	01:55	x86	None	Not applicable
Webengine4.dll	4.8.4330.0	564,616	05-Jan-2021	01:30	x86	None	Not applicable
Webengine.dll	4.8.4330.0	19,328	05-Jan-2021	01:30	x86	None	Not applicable
Workflowservicehostperformancecounters.dll	4.8.4110.0	89,368	04-Dec-2019	02:55	x86	None	Not applicable
Wpfgfx_v0400.dll	4.8.4330.0	1,618,824	05-Jan-2021	01:30	x86	None	Not applicable
Globalmonospace.compositefont	Not applicable	26,040	03-Sep-2020	20:09	Not applicable	None	Not applicable
Globalsansserif.compositefont	Not applicable	26,489	03-Sep-2020	20:09	Not applicable	None	Not applicable
Globalserif.compositefont	Not applicable	29,779	03-Sep-2020	20:09	Not applicable	None	Not applicable
Globaluserinterface.compositefont	Not applicable	264,986	24-Sep-2020	02:17	Not applicable	None	Not applicable
Presentationcore.dll	4.8.4330.0	3,673,992	05-Jan-2021	01:30	x86	None	Not applicable
System.data.dll	4.8.4290.0	3,476,360	30-Sep-2020	01:40	x86	None	Not applicable
System.printing.dll	4.8.4110.0	399,640	04-Dec-2019	02:55	x86	None	Not applicable
System.web.dll	4.8.4330.0	5,410,184	05-Jan-2021	01:30	x86	None	Not applicable

Information about protection and security

Protect yourself online: Windows Security support
Learn how we guard against cyber threats: Microsoft Security

Security and Quality Rollup for .NET Framework 4.8 for Windows Server 2012 (KB4601057)

Summary

Known issues in this update

Additional information about this update

How to obtain and install the update

File Information

Information about protection and security

Need more help?

Want more options?

Was this information helpful?

Thank you for your feedback!

Summary

Known issues in this update

Additional information about this update

How to obtain and install the update

File Information

For all supported x86-based versions

Information about protection and security

Need more help?

Want more options?

Was this information helpful?

Thank you for your feedback!