KLA10768 Security bypass vulnerability in Microsoft .NET Framework

An improper XML validation was found in Microsoft .NET Framework. By exploiting this vulnerability malicious users can bypass security restrictions. This vulnerability can be exploited remotely via signed XML file manipulations.

Original advisories

CVE-2016-0132

Related products

Microsoft-.NET-Framework

CVE list

CVE-2016-0132 critical

KB list

3135996

3135985

3135987

3135995

3135984

3135983

3135982

3140768

3135991

3135989

3136000

3135998

3135988

3141780

3135994

3135997

3140745

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Microsoft .NET Framework 2.0 Service Pack 2Microsoft .NET Framework 3.0 Service Pack 2Microsoft .NET Framework 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1