Quantcast
Skip to content
ATTENTION TWEETERS: Before clicking the tweet button, please ensure the proper URL is displayed in your location bar. How? Click the post title, or permalink. (Otherwise, your tweet will point to the site, only, making it difficult for your readers to find.)
-- Thank you!
the Author

Microsoft .NET and Silverlight Allow Code Execution

Known URL’s hosted by Microsoft which are relevant to this critical update:

  • http://support.microsoft.com/kb/2514842
  • http://support.microsoft.com/kb/2478658
  • Combat vulnerability. Download the Update

The text provided here is only an excerpt of the original MS article. Please do not mistake this NoviceNotes™ article for the official Microsoft article. Instead, read the Microsoft KB articles indicated above, for complete details.

Microsoft Security Bulletin Excerpt

According to Microsoft Windows XP operating system Automatic Updates facility, Users and System Administrators are advised to immediate action for repairing a vulnerability posted by Microsoft on 2011-06-14 as KB2514842 † , and as detailed under KB2478658.
Please view the Microsoft publications for complete details!

begin excerpt:

Microsoft Security Bulletin MS11-039 – Critical

Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (2514842)
Published: June 14, 2011
Version: 1.0
General Information
Executive Summary
This security update resolves a privately reported vulnerability in Microsoft .NET Framework and Microsoft Silverlight. …

Recommendation. The majority of customers have automatic updating enabled and will not need to take any action because this security update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates and install this update manually. For information about specific configuration options in automatic updating, see Microsoft Knowledge Base Article 294871†.

For administrators and enterprise installations, or end users who want to install this security update manually, Microsoft recommends that customers apply the update immediately using update management software, or by checking for updates using the Microsoft Update service.

See also the section, Detection and Deployment Tools and Guidance, later in this bulletin.

Known Issues. Microsoft Knowledge Base Article 2514842 documents the currently known issues that customers may experience when installing this security update. The article also documents recommended solutions for these issues.

See Microsoft Security Bulletin MS11-039 – Critical: Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote Code Execution (KB2514842).

:end excerpt

† Note: Generally, any Microsoft related publications wherein a number is preceded by the letters “KB” (i.e. KB2478658 as indicated here), the characters KB reference the Microsoft “Knowledge Base”, while the numeric portion of the string, immediately following “KB”, is a unique identifier which references a specific Microsoft Knowledge Base article.

In my experience, the path to resolving a Microsoft Windows issue begins with the Microsoft Knowledge Base, where cross-references and a download for solving problems are often just a few clicks away. Microsoft “KB” references are publicly available, at Support.Microsoft.com.

To engage this DIY approach to MS Windows problem-solving, use the following mnemonic, a step-by-step URL builder:

Support begins at Microsoft dot com
begin the URL with “support”:
support.microsoft.com
The Knowledge Base is the base URL
Create the base URL. Append “KB” onto the existing string:
support.microsoft.com/kb
What’s my number?
Complete the URL. Using the base URL, append the KB number– the numbers following “KB”– of a Knowledge Base article known to exist:
support.microsoft.com/kb/01234567689
the number to a desired KB article will be different than as shown in this example.
Mnemonic Summary
To summarize this admittedly hasty mnemonic, to locate the “KB” article relevant to this NoviceNotes™ article, the 3-step process described immediately above would flow as follows:
  1. Support begins at Microsoft dot com:
    support.microsoft.com
  2. Create the base URL:
    support.microsoft.com/kb
  3. What’s my number?:
    support.microsoft.com/kb/987654321

Microsoft Technet Security Bulletin #MS11-039

Related posts:

  1. Opera Hits Microsoft with a Bludgeoning Left Hook!
  2. the Doepud Show : Code they Say is Made in U.K.
  3. What You Won’t Know; What Hurts You.
  4. XSS Preparedness & a Friendly Programmer’s Advice

Posted in MS Windows, Operating System, Software.

Tagged with , , , , , , , , , .

No comments

By NoviceNotes™ – 2011.06.28

Leave a Reply

« »

Related posts:

  1. Opera Hits Microsoft with a Bludgeoning Left Hook!
  2. the Doepud Show : Code they Say is Made in U.K.
  3. What You Won’t Know; What Hurts You.
Close