• info
• discussion
• exploit
• solution
• references

Microsoft .NET Framework PE Loader Remote Buffer Overflow Vulnerability

Solution:
Microsoft has released security bulletin MS07-040 as well as updates to address this issue. Please see the references for details.

Microsoft security bulletin MS07-040 has been revised; please see the referenced bulletin for details.


Microsoft .NET Framework 2.0

• Microsoft KB928365 - .NET Framework 2.0 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Windows 2000, Windo
  http://www.microsoft.com/downloads/details.aspx?FamilyId=BA3CEB78-8E1B -4C38-ADFD-E8BC95AE548D


• Microsoft KB929916 - .NET Framework 2.0 SYSTEM.WEB.DLL Security Update for Windows Vista
  http://www.microsoft.com/downloads/details.aspx?FamilyId=CBC9F3CF-C3C3 -45C4-82E3-E11398BC2CD2

Microsoft .NET Framework 1.0 SP3

• Microsoft KB928367 - .NET Framework 1.0 Service Pack 3 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Wind
  http://www.microsoft.com/downloads/details.aspx?FamilyId=91D7AFE4-069B -4CE8-976E-9A01345A8603


• Microsoft KB930494 - .NET Framework 1.0 Service Pack 3 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Wind
  http://www.microsoft.com/downloads/details.aspx?FamilyId=829A2C5B-11EC -4ED7-91AB-6961034147BC

Microsoft .NET Framework 1.1 SP1

• Microsoft KB928366 - .NET Framework 1.1 Service Pack 1 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Wind
  http://www.microsoft.com/downloads/details.aspx?FamilyId=281FB2CD-C715 -4F05-A01F-0455D2D9EBFB


• Microsoft KB929729 - .NET Framework 1.1 Service Pack 1 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Wind
  http://www.microsoft.com/downloads/details.aspx?FamilyId=7EEA368D-7B82 -4583-8537-30351718A4E9


• Microsoft KB933854 - .NET Framework 1.1 Service Pack 1 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Wind
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2495E656-1E0A -4B83-90DA-821E68067A71