简介
此更新解决了 Microsoft .NET Framework 中的一个漏洞。如果攻击者向已禁用自定义错误消息的受影响服务器发送经特殊设计的 Web 请求，则此漏洞可能允许信息泄漏。成功利用此漏洞的攻击者可以查看部分 web 配置文件，这可能会暴露敏感信息。
概要
Microsoft 已发布安全公告 MS15-041。详细了解如何获取此安全公告中包含的修补程序：
-
对于个人、小型企业和组织用户，请使用 Windows 自动更新功能安装由 Microsoft 更新提供的修补程序。为此，请参阅 Microsoft 安全中心网站上的自动获取安全更新部分。
-
对于 IT 专业人员，请参阅安全技术中心网站上的 Microsoft 安全公告 MS15-041。
如何获取此安全更新的相关帮助和支持
帮助安装更新：Microsoft 更新支持面向 IT 专业人员的安全解决方案：TechNet 安全疑难解答和支持帮助保护您基于 Windows 的计算机不受病毒和恶意软件危害：病毒解决方案和安全中心本地支持（根据您的国家/地区）：国际支持
有关此安全更新的详细信息
下载信息
若要安装此更新，请从 Microsoft Windows 更新进行安装。此外，您还可以从 Microsoft 下载中心安装此更新。
先决条件
要安装此更新，必须在计算机上安装 Windows Installer 3.1 或更新版本。
此更新的命令行开关
重启信息
仅当正在更新的文件被锁定或正在使用时，才需要在应用此安全更新之后重启系统。注意 此更新将导致 IIS 服务重新启动。
更新替换信息
此更新将替换以下更新：
2901110 MS14-009：Windows XP、Windows Server 2003、Windows Vista、Windows Server 2008、Windows 7 和 Windows Server 2008 R2 上的 .NET Framework 4 安全更新说明：2014 年 2 月 11 日
更新删除信息
注意 我们不建议您删除任何安全更新。要删除此更新，请使用“控制面板”中的“程序和功能”项。
此更新的英语（美国）版本将安装具有下表所列属性的文件。这些文件的日期和时间按协调世界时 (UTC) 列出。这些文件在您的本地计算机中的显示日期和时间是您的本地时间加上当前夏令时 (DST) 偏差。此外，如果对这些文件执行某些操作，日期和时间可能会更改。
对于所有受支持的基于 x86 版本系统GDR 服务分支
|
File name |
File version |
File size |
Date |
Time |
|---|---|---|---|---|
|
ServiceModelReg.exe |
4.0.30319.1031 |
192,664 |
05-Feb-2015 |
13:16 |
|
Setup.exe |
10.0.30319.1031 |
78,992 |
05-Feb-2015 |
13:15 |
|
SetupEngine.dll |
10.0.30319.1031 |
811,152 |
05-Feb-2015 |
13:15 |
|
SetupUi.dll |
10.0.30319.1031 |
296,584 |
05-Feb-2015 |
13:15 |
|
aspnet_wp.exe |
4.0.30319.1031 |
33,424 |
05-Feb-2015 |
14:12 |
|
System.Web.Extensions.dll |
4.0.30319.1031 |
1,867,440 |
05-Feb-2015 |
14:12 |
|
System.Web.dll |
4.0.30319.1031 |
5,258,392 |
05-Feb-2015 |
14:12 |
|
System.Web.Mobile.dll |
4.0.30319.1031 |
835,752 |
05-Feb-2015 |
14:12 |
|
webengine.dll |
4.0.30319.1031 |
14,992 |
05-Feb-2015 |
14:12 |
|
webengine4.dll |
4.0.30319.1031 |
496,272 |
05-Feb-2015 |
14:12 |
LDR 服务分支
|
File name |
File version |
File size |
Date |
Time |
|---|---|---|---|---|
|
ServiceModelReg.exe |
4.0.30319.2056 |
192,664 |
05-Feb-2015 |
15:00 |
|
Setup.exe |
10.0.30319.2056 |
78,984 |
05-Feb-2015 |
14:59 |
|
SetupEngine.dll |
10.0.30319.2056 |
811,152 |
05-Feb-2015 |
14:59 |
|
SetupUi.dll |
10.0.30319.2056 |
296,584 |
05-Feb-2015 |
14:59 |
|
aspnet_wp.exe |
4.0.30319.2056 |
33,424 |
05-Feb-2015 |
16:08 |
|
System.Web.Extensions.dll |
4.0.30319.2056 |
1,867,432 |
05-Feb-2015 |
16:08 |
|
System.Web.dll |
4.0.30319.2056 |
5,263,000 |
05-Feb-2015 |
16:08 |
|
System.Web.Mobile.dll |
4.0.30319.2056 |
835,744 |
05-Feb-2015 |
16:08 |
|
webengine.dll |
4.0.30319.2056 |
14,992 |
05-Feb-2015 |
16:08 |
|
webengine4.dll |
4.0.30319.2056 |
496,272 |
05-Feb-2015 |
16:08 |
对于所有受支持的基于 x64 版本系统GDR 服务分支
|
File name |
File version |
File size |
Date |
Time |
|---|---|---|---|---|
|
ServiceModelReg.exe |
4.0.30319.1031 |
261,792 |
05-Feb-2015 |
13:32 |
|
ServiceModelReg.exe |
4.0.30319.1031 |
192,664 |
05-Feb-2015 |
13:16 |
|
Setup.exe |
10.0.30319.1031 |
78,992 |
05-Feb-2015 |
13:15 |
|
SetupEngine.dll |
10.0.30319.1031 |
811,152 |
05-Feb-2015 |
13:15 |
|
SetupUi.dll |
10.0.30319.1031 |
296,584 |
05-Feb-2015 |
13:15 |
|
aspnet_wp.exe |
4.0.30319.1031 |
41,616 |
05-Feb-2015 |
14:24 |
|
aspnet_wp.exe |
4.0.30319.1031 |
33,424 |
05-Feb-2015 |
14:12 |
|
System.Web.Extensions.dll |
4.0.30319.1031 |
1,867,440 |
05-Feb-2015 |
14:12 |
|
System.Web.dll |
4.0.30319.1031 |
5,228,184 |
05-Feb-2015 |
14:23 |
|
System.Web.dll |
4.0.30319.1031 |
5,258,392 |
05-Feb-2015 |
14:12 |
|
System.Web.Mobile.dll |
4.0.30319.1031 |
835,752 |
05-Feb-2015 |
14:12 |
|
webengine.dll |
4.0.30319.1031 |
16,528 |
05-Feb-2015 |
14:24 |
|
webengine.dll |
4.0.30319.1031 |
14,992 |
05-Feb-2015 |
14:12 |
|
webengine4.dll |
4.0.30319.1031 |
721,552 |
05-Feb-2015 |
14:24 |
|
webengine4.dll |
4.0.30319.1031 |
496,272 |
05-Feb-2015 |
14:12 |
LDR 服务分支
|
File name |
File version |
File size |
Date |
Time |
|---|---|---|---|---|
|
ServiceModelReg.exe |
4.0.30319.2056 |
261,792 |
05-Feb-2015 |
15:21 |
|
ServiceModelReg.exe |
4.0.30319.2056 |
192,664 |
05-Feb-2015 |
15:00 |
|
Setup.exe |
10.0.30319.2056 |
78,984 |
05-Feb-2015 |
14:59 |
|
SetupEngine.dll |
10.0.30319.2056 |
811,152 |
05-Feb-2015 |
14:59 |
|
SetupUi.dll |
10.0.30319.2056 |
296,584 |
05-Feb-2015 |
14:59 |
|
aspnet_wp.exe |
4.0.30319.2056 |
41,616 |
05-Feb-2015 |
16:24 |
|
aspnet_wp.exe |
4.0.30319.2056 |
33,424 |
05-Feb-2015 |
16:08 |
|
System.Web.Extensions.dll |
4.0.30319.2056 |
1,867,432 |
05-Feb-2015 |
16:08 |
|
System.Web.dll |
4.0.30319.2056 |
5,232,784 |
05-Feb-2015 |
16:24 |
|
System.Web.dll |
4.0.30319.2056 |
5,263,000 |
05-Feb-2015 |
16:08 |
|
System.Web.Mobile.dll |
4.0.30319.2056 |
835,744 |
05-Feb-2015 |
16:08 |
|
webengine.dll |
4.0.30319.2056 |
16,536 |
05-Feb-2015 |
16:24 |
|
webengine.dll |
4.0.30319.2056 |
14,992 |
05-Feb-2015 |
16:08 |
|
webengine4.dll |
4.0.30319.2056 |
722,072 |
05-Feb-2015 |
16:24 |
|
webengine4.dll |
4.0.30319.2056 |
496,272 |
05-Feb-2015 |
16:08 |
对于所有受支持的基于 IA-64 版本系统GDR 服务分支
|
File name |
File version |
File size |
Date |
Time |
|---|---|---|---|---|
|
ServiceModelReg.exe |
4.0.30319.1031 |
545,432 |
05-Feb-2015 |
13:52 |
|
ServiceModelReg.exe |
4.0.30319.1031 |
192,664 |
05-Feb-2015 |
13:16 |
|
Setup.exe |
10.0.30319.1031 |
78,992 |
05-Feb-2015 |
13:15 |
|
SetupEngine.dll |
10.0.30319.1031 |
811,152 |
05-Feb-2015 |
13:15 |
|
SetupUi.dll |
10.0.30319.1031 |
296,584 |
05-Feb-2015 |
13:15 |
|
aspnet_wp.exe |
4.0.30319.1031 |
81,040 |
05-Feb-2015 |
14:36 |
|
aspnet_wp.exe |
4.0.30319.1031 |
33,424 |
05-Feb-2015 |
14:12 |
|
System.Web.Extensions.dll |
4.0.30319.1031 |
1,867,440 |
05-Feb-2015 |
14:12 |
|
System.Web.dll |
4.0.30319.1031 |
4,847,248 |
05-Feb-2015 |
14:35 |
|
System.Web.dll |
4.0.30319.1031 |
5,258,392 |
05-Feb-2015 |
14:12 |
|
System.Web.Mobile.dll |
4.0.30319.1031 |
835,752 |
05-Feb-2015 |
14:12 |
|
webengine.dll |
4.0.30319.1031 |
26,256 |
05-Feb-2015 |
14:36 |
|
webengine.dll |
4.0.30319.1031 |
14,992 |
05-Feb-2015 |
14:12 |
|
webengine4.dll |
4.0.30319.1031 |
1,342,096 |
05-Feb-2015 |
14:36 |
|
webengine4.dll |
4.0.30319.1031 |
496,272 |
05-Feb-2015 |
14:12 |
LDR 服务分支
|
File name |
File version |
File size |
Date |
Time |
|---|---|---|---|---|
|
ServiceModelReg.exe |
4.0.30319.2056 |
545,440 |
05-Feb-2015 |
15:46 |
|
ServiceModelReg.exe |
4.0.30319.2056 |
192,664 |
05-Feb-2015 |
15:00 |
|
Setup.exe |
10.0.30319.2056 |
78,984 |
05-Feb-2015 |
14:59 |
|
SetupEngine.dll |
10.0.30319.2056 |
811,152 |
05-Feb-2015 |
14:59 |
|
SetupUi.dll |
10.0.30319.2056 |
296,584 |
05-Feb-2015 |
14:59 |
|
aspnet_wp.exe |
4.0.30319.2056 |
81,040 |
05-Feb-2015 |
16:40 |
|
aspnet_wp.exe |
4.0.30319.2056 |
33,424 |
05-Feb-2015 |
16:08 |
|
System.Web.Extensions.dll |
4.0.30319.2056 |
1,867,432 |
05-Feb-2015 |
16:08 |
|
System.Web.dll |
4.0.30319.2056 |
4,851,864 |
05-Feb-2015 |
16:40 |
|
System.Web.dll |
4.0.30319.2056 |
5,263,000 |
05-Feb-2015 |
16:08 |
|
System.Web.Mobile.dll |
4.0.30319.2056 |
835,744 |
05-Feb-2015 |
16:08 |
|
webengine.dll |
4.0.30319.2056 |
26,256 |
05-Feb-2015 |
16:40 |
|
webengine.dll |
4.0.30319.2056 |
14,992 |
05-Feb-2015 |
16:08 |
|
webengine4.dll |
4.0.30319.2056 |
1,343,128 |
05-Feb-2015 |
16:40 |
|
webengine4.dll |
4.0.30319.2056 |
496,272 |
05-Feb-2015 |
16:08 |
适用于此文章适用于以下内容：
-
Microsoft .NET Framework 4，与以下版本一起使用时：
-
Windows Server 2008 R2 Service Pack 1
-
Windows 7 Service Pack 1
-
Windows Server 2008 Service Pack 2
-
Windows Vista Service Pack 2
-
Windows Server 2003 Service Pack 2
-
