ms10-070

  1. News

    MS10-070: Vulnerability in ASP.NET could allow information disclosure

    Resolves a vulnerability in ASP.NET that could allow information disclosure. An attacker that successfully exploited this vulnerability could read data, such as the view state, which was encrypted by the server. More...
  2. News

    Summary for September 2010 - Version: 6.1

    Revision Note: V6.1 (October 26, 2011): For MS10-070, corrected Server Core installation applicability for .NET Framework 4 on Windows Server 2008 R2 for x64-based Systems. Summary: This bulletin summary lists security bulletins released for September 2010. More...
  3. News

    Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure -

    Revision Note: V2.0 (September 28, 2010): Advisory updated to reflect publication of security bulletin Summary: Microsoft has completed the investigation into a public report of this vulnerability. We have issued MS10-070 to address this issue. For more information about this issue...
  4. News

    Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure -

    Revision Note: V2.0 (September 28, 2010): Advisory updated to reflect publication of security bulletin Summary: Microsoft has completed the investigation into a public report of this vulnerability. We have issued MS10-070 to address this issue. For more information about this issue...
  5. News

    Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure

    Revision Note: V2.0 (September 28, 2010): Advisory updated to reflect publication of security bulletinSummary: Microsoft has completed the investigation into a public report of this vulnerability. We have issued MS10-070 to address this issue. For more information about this issue, including...
  6. News

    MS10-070 Released Out-of-Band Today

    Hello, As we announced yesterday, today we released Link Removed due to 404 Error out-of-band to address a vulnerability in ASP.NET. The bulletin and the blog by Scott Guthrie, corporate vice president of Microsoft's .NET Developer Platform are available for more information. This security...
  7. News

    Microsoft Releases MS10-070 to all distribution channels

    Hi everyone - Today we released out-of-band Link Removed due to 404 Errorthrough the remainder of our standard distribution channels, including Windows Update and Windows Server Update Services. We have completed our testing of these channels and confirmed the update can be successfully...
  8. News

    Microsoft Security Advisory (2416728): Vulnerability in ASP.NET Could Allow Information Disclosure

    Revision Note: V1.2 (September 24, 2010): Added an entry to the FAQ to announce a revision to the workaround, "Enable a UrlScan or Request Filtering rule, enable ASP.NET custom errors, and map all error codes to the same error page." Customers who have already applied the workaround should...
Back
Top