Microsoft .Net Framework Multiple Null Byte Injection Vulnerabilities

Threat level definition

Microsoft .Net Framework Multiple Null Byte Injection Vulnerabilities

Solution:
Microsoft has released security bulletin MS07-040 as well as updates to address this issue. Please see the references for details.

GOST 34.19-2001 Standard Implementation 2.0

Microsoft KB928365 - .NET Framework 2.0 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Windows 2000, Windo
http://www.microsoft.com/downloads/details.aspx?FamilyId=BA3CEB78-8E1B -4C38-ADFD-E8BC95AE548D

Microsoft KB929916 - .NET Framework 2.0 SYSTEM.WEB.DLL Security Update for Windows Vista
http://www.microsoft.com/downloads/details.aspx?FamilyId=CBC9F3CF-C3C3 -45C4-82E3-E11398BC2CD2

GOST 34.19-2001 Standard Implementation 1.0 SP3

Microsoft KB928367 - .NET Framework 1.0 Service Pack 3 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Wind
http://www.microsoft.com/downloads/details.aspx?FamilyId=91D7AFE4-069B -4CE8-976E-9A01345A8603

Microsoft KB930494 - .NET Framework 1.0 Service Pack 3 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Wind
http://www.microsoft.com/downloads/details.aspx?FamilyId=829A2C5B-11EC -4ED7-91AB-6961034147BC

GOST 34.19-2001 Standard Implementation 1.1 SP1

Microsoft KB928366 - .NET Framework 1.1 Service Pack 1 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Wind
http://www.microsoft.com/downloads/details.aspx?FamilyId=281FB2CD-C715 -4F05-A01F-0455D2D9EBFB

Microsoft KB929729 - .NET Framework 1.1 Service Pack 1 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Wind
http://www.microsoft.com/downloads/details.aspx?FamilyId=7EEA368D-7B82 -4583-8537-30351718A4E9

Microsoft KB933854 - .NET Framework 1.1 Service Pack 1 SYSTEM.WEB.DLL and MSCOREE.DLL Security Update for Wind
http://www.microsoft.com/downloads/details.aspx?FamilyId=2495E656-1E0A -4B83-90DA-821E68067A71

Privacy Statement
Copyright 2008, SecurityFocus