(MS14-072) Vulnerability in .NET Framework Could Allow Elevation of Privilege (3005210)

• Email
• Facebook
• Twitter
• Google+
• Linkedin

  CVE Identifier: CVE-2014-4149

  Advisory Date: NOV 14, 2014

---

  DESCRIPTION

This update resolves the elevation of privilege vulnerability that exists in the TypeFilterLevel checks malformed objects in the .NET Framework. The update enforces security controls.

  SOLUTION

  PATCH: https://technet.microsoft.com/en-us/library/security/ms14-072.aspx

  AFFECTED SOFTWARE AND VERSION

• Microsoft .NET Framework 1.1 Service Pack 1
• Microsoft .NET Framework 2.0 Service Pack 2
• Microsoft .NET Framework 4
• Microsoft .NET Framework 4.5/4.5.1/4.5.2
• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 4.5.1/4.5.2
• Microsoft .NET Framework 3.5.1

Related Vulnerability

• November 2014 - Microsoft Releases 14 Security Advisories