asp.net

  1. An ASP.NET request that has lots of form keys, files, or JSON payload members fails with an exceptio

    Microsoft security update MS11-100 limits the maximum number of form keys, files, and JSON members to 1000 in an HTTP request. Because of this change, ASP.NET applications reject requests that have more than 1000 of these elements. HTTP clients that... More...
    • News
    • Thread
    • application asp.net exception form keys http json microsoft request limitations security update
    • Replies: 0
    • Forum: Knowledge Base (KB)

  2. MS11-100 - Critical : Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)

    Severity Rating: Critical Revision Note: V1.1 (December 30, 2011): Added entry to the Update FAQ to address security-related changes to functionality contained in this update and added mitigation for CVE-2011-3414 Summary: This security update resolves one publicly...
    • News
    • Thread
    • asp.net attacker critical cve-2011-3414 elevation exploit extended security updates ms11-100 net framework vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  3. An ASP.NET forms authentication request that is sent to server in a web farm may fail

    Describes an issue related to the security update MS11-100. The security update changes the format of forms authentication tickets in a way that is incompatible with the older version of forms authentication tickets. More...
    • News
    • Thread
    • asp.net authentication compatibility forms ms11-100 security tickets update web farm
    • Replies: 0
    • Forum: Knowledge Base (KB)

  4. An ASP.NET request that has lots of form keys, files, or JSON payload fails with an exception and re

    Security update MS11-100 limits the maximum number of form keys, files, and JSON members to 1000 in a request. Because of this change, ASP.NET applications reject requests that have more than 1000 of these elements. Clients who make these kinds of... More...
    • News
    • Thread
    • asp.net exception files forms json limitations payload request security update
    • Replies: 0
    • Forum: Knowledge Base (KB)

  5. December 2011 Out-Of-Band Security Bulletin Webcast Q&A

    Hosts: Jonathan Ness, Security Development Manager, MSRC Pete Voss, Sr. Response Communications Manager, Trustworthy Computing Website: TechNet/Security Chat Topic: December 2011 Out-Of-Band Security Bulletin Release Date...
    • News
    • Thread
    • asp.net authentication custom code cve denial of service exchange 2010 exploitability forms authentication hashtable iis internet-facing patch management security server environment technical guidance update vulnerability web server windows server windows update
    • Replies: 0
    • Forum: Security Alerts

  6. MS11-100: Description of the security update for the .NET Framework 3.5.1 on Windows 7 and Windows S

    Resolves a vulnerability in ASP.NET that could allow information disclosure. An attacker that successfully exploited this vulnerability could read data, such as the view state, which was encrypted by the server. More...
    • News
    • Thread
    • asp.net information disclosure net framework security update vulnerability windows 7
    • Replies: 0
    • Forum: Knowledge Base (KB)

  7. MS11-100: Description of the security update for the .NET Framework 3.5.1 on Windows 7 SP1 and Windo

    Resolves a vulnerability in ASP.NET that could allow information disclosure. An attacker that successfully exploited this vulnerability could read data, such as the view state, which was encrypted by the server. More...
    • News
    • Thread
    • asp.net data security encryption information disclosure microsoft net framework security update vulnerability windows 7
    • Replies: 0
    • Forum: Knowledge Base (KB)

  8. MS11-100: Vulnerability in the .NET Framework could allow elevation of privilege: December 29, 2011

    This article contains details for the ASP.NET update for the .NET Framework. More...
    • News
    • Thread
    • 2011 asp.net microsoft ms11-100 net framework patch privilege escalation security update vulnerability
    • Replies: 0
    • Forum: Knowledge Base (KB)

  9. MS11-100: Description of the security update for the .NET Framework 4 on Windows XP, Windows Server

    Resolves a vulnerability in ASP.NET that could allow information disclosure. An attacker that successfully exploited this vulnerability could read data, such as the view state, which was encrypted by the server. More...
    • News
    • Thread
    • asp.net information disclosure net framework security update vulnerability windows server windows xp
    • Replies: 0
    • Forum: Knowledge Base (KB)

  10. Microsoft releases MS11-100 for Security Advisory 2659883

    Hello, Today we released Security Update MS11-100 to address the issue described in Security Advisory 2659883. The security update has a severity rating of Critical and resolves a publicly disclosed remote unauthenticated Denial of Service issue in ASP.NET versions 1.1 and above on all supported...
    • News
    • Thread
    • advisory asp.net critical denial of service framework microsoft patch security update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  11. MS11-100 - Critical : Vulnerabilities in .NET Framework Could Allow Elevation of Privilege (2638420)

    Severity Rating: Critical Revision Note: V1.0 (January 10, 2011): Bulletin published. Summary: This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft .NET Framework. The most severe of these...
    • News
    • Thread
    • asp.net bulletin critical elevation of privilege exploit microsoft net framework security update vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  12. Advanced Notification for out-of-band release to address Security Advisory 2659883

    Hello, Today we’re providing advance notification for an out-of-band security update to address the publicly disclosed issue described in Security Advisory 2659883. The release is scheduled for tomorrow, December 29, at approximately 10 a.m. PST. The bulletin has a severity rating of...
    • News
    • Thread
    • advisory asp.net critical microsoft out-of-band security trustworthy computing update vulnerability webcast
    • Replies: 0
    • Forum: Security Alerts

  13. Microsoft Security Advisory: Vulnerability in ASP.NET could allow denial of service

    Provides a link to Microsoft Security Advisory (2659883): Vulnerability in ASP.NET Could Allow Denial of Service. Link Removed
    • News
    • Thread
    • advisory asp.net denial of service microsoft patch risk security threats update vulnerability
    • Replies: 0
    • Forum: Knowledge Base (KB)

  14. Microsoft Security Advisory: Vulnerability in ASP.NET Could Allow Denial of Service

    Provides a link to Microsoft Security Advisory (2659883): Vulnerability in ASP.NET Could Allow Denial of Service. Link Removed
    • News
    • Thread
    • 2659883 advisory asp.net denial of service microsoft security vulnerability
    • Replies: 0
    • Forum: Knowledge Base (KB)

  15. Microsoft Security Advisory (2659883): Vulnerability in ASP.NET Could Allow Denial of Service - Vers

    Revision Note: V1.0 (December 28, 2011): Advisory published. Summary: Microsoft is aware of detailed information that has been published describing a new method to exploit hash tables. Attacks targeting this type of vulnerability are generically known as hash collision attacks. Attacks...
    • News
    • Thread
    • advisory asp.net denial of service hash collisions microsoft mitigation net framework security vulnerability web services
    • Replies: 0
    • Forum: Security Alerts

  16. Microsoft releases Security Advisory 2659883, offers workaround for industry-wide issue

    Hello, Today we published Security Advisory 2659883 to provide a workaround to help protect ASP.NET customers from a publicly disclosed vulnerability that affects various Web platforms industry-wide. We are not aware of any attacks using this vulnerability, which affects all supported versions...
    • News
    • Thread
    • advisory asp.net customers defense exploit framework hashtable industry information microsoft mitigation protection research security trustworthy twitter update vulnerability web platform workaround
    • Replies: 0
    • Forum: Security Alerts

  17. MS11-078 - Critical : Vulnerability in .NET Framework and Microsoft Silverlight Could Allow Remote C

    Severity Rating: Critical Revision Note: V1.2 (October 26, 2011): Corrected Server Core installation applicability for .NET Framework 4 on Windows Server 2008 R2 for x64-based Systems. Summary: This security update resolves a privately reported vulnerability in Microsoft...
    • News
    • Thread
    • application asp.net browser cas critical dotnet iis microsoft october remote code execution security server core silverlight update user rights vulnerability web server windows x64 xaml
    • Replies: 0
    • Forum: Security Alerts

  18. MS10-077 - Critical : Vulnerability in .NET Framework Could Allow Remote Code Execution (2160841) -

    Severity Rating: Critical Revision Note: V3.1 (October 26, 2011): Corrected Server Core installation applicability for .NET Framework 4 on Windows Server 2008 R2 for x64-based Systems. Summary: This security update resolves a privately reported vulnerability in Microsoft...
    • News
    • Thread
    • asp.net browser iis microsoft net framework remote code execution security update vulnerability windows server
    • Replies: 0
    • Forum: Security Alerts

  19. Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure -

    Revision Note: V2.0 (September 28, 2010): Advisory updated to reflect publication of security bulletin Summary: Microsoft has completed the investigation into a public report of this vulnerability. We have issued MS10-070 to address this issue. For more information about this issue...
    • News
    • Thread
    • 2010 advisory asp.net bulletin complaints cve-2010-3332 extended security updates information information disclosure investigation issues microsoft ms10-070 oracle padding public reports revision note security update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  20. MS10-07B - Important : Vulnerability in ASP.NET Could Allow Information Disclosure (2418042) - Versi

    Severity Rating: Important Revision Note: V4.1 (April 20, 2011): Corrected registry key verification for Microsoft .NET Framework 3.5 Service Pack 1 when installed on Windows XP and Windows Server 2003. Summary: This security update resolves a publicly disclosed...
    • News
    • Thread
    • asp.net encryption exploitation framework information disclosure microsoft patch registry security service pack tampering update vulnerability windows server windows xp
    • Replies: 0
    • Forum: Security Alerts