Yesterday, Microsoft issued a security bulletin for the .NET issues mentioned the other day. That document can be found here:
http://technet.microsoft.com/security/bulletin/ms11-dec
Critical Security Bulletins
============================
MS11-100
– Affected Software:
– Windows XP Service Pack 3
– Microsoft .NET Framework 1.1 Service Pack 1
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 3.5 Service Pack 1
– Microsoft .NET Framework 4
– Windows XP Professional x64 Edition Service Pack 2
– Microsoft .NET Framework 1.1 Service Pack 1
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 3.5 Service Pack 1
– Microsoft .NET Framework 4
– Windows Server 2003 Service Pack 2
– Microsoft .NET Framework 1.1 Service Pack 1
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 3.5 Service Pack 1
– Microsoft .NET Framework 4
– Windows Server 2003 x64 Edition Service Pack 2
– Microsoft .NET Framework 1.1 Service Pack 1
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 3.5 Service Pack 1
– Microsoft .NET Framework 4
– Windows Server 2003 with SP2 for Itanium-based Systems
– Microsoft .NET Framework 1.1 Service Pack 1
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 3.5 Service Pack 1
– Microsoft .NET Framework 4
– Windows Vista Service Pack 2
– Microsoft .NET Framework 1.1 Service Pack 1
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 3.5 Service Pack 1
– Microsoft .NET Framework 4
– Windows Vista x64 Edition Service Pack 2
– Microsoft .NET Framework 1.1 Service Pack 1
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 3.5 Service Pack 1
– Microsoft .NET Framework 4
– Windows Server 2008 for 32-bit Systems Service Pack 2
– Microsoft .NET Framework 1.1 Service Pack 1
(Windows Server 2008 Server Core installation not affected)
– Microsoft .NET Framework 2.0 Service Pack 2
(Windows Server 2008 Server Core installation not affected)
– Microsoft .NET Framework 3.5 Service Pack 1
(Windows Server 2008 Server Core installation not affected)
– Microsoft .NET Framework 4
(Windows Server 2008 Server Core installation not affected)
– Windows Server 2008 for x64-based Systems Service Pack 2
– Microsoft .NET Framework 1.1 Service Pack 1
(Windows Server 2008 Server Core installation not affected)
– Microsoft .NET Framework 2.0 Service Pack 2
(Windows Server 2008 Server Core installation not affected)
– Microsoft .NET Framework 3.5 Service Pack 1
(Windows Server 2008 Server Core installation not affected)
– Microsoft .NET Framework 4
(Windows Server 2008 Server Core installation not affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Microsoft .NET Framework 1.1 Service Pack 1
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 3.5 Service Pack 1
– Microsoft .NET Framework 4
– Windows 7 for 32-bit Systems only:
– Microsoft .NET Framework 3.5.1
– Microsoft .NET Framework 4
– Windows 7 for 32-bit Systems Service Pack 1 only:
– Microsoft .NET Framework 3.5.1
– Microsoft .NET Framework 4
– Windows 7 for x64-based Systems only:
– Microsoft .NET Framework 3.5.1
– Microsoft .NET Framework 4
– Windows 7 for x64-based Systems Service Pack 1 only:
– Microsoft .NET Framework 3.5.1
– Microsoft .NET Framework 4
– Windows Server 2008 R2 for x64-based Systems only:
– Microsoft .NET Framework 3.5.1
(Windows Server 2008 R2 Server Core installation affected)
– Microsoft .NET Framework 4
– Windows Server 2008 R2 for x64-based Systems Service Pack 1 only:
– Microsoft .NET Framework 3.5.1
(Windows Server 2008 R2 Server Core installation affected)
– Microsoft .NET Framework 4
(Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems only:
– Microsoft .NET Framework 3.5.1
– Microsoft .NET Framework 4
– Windows Server 2008 R2 for Itanium-based Systems
Service Pack 1 only:
– Microsoft .NET Framework 3.5.1
– Microsoft .NET Framework 4
– Impact: Elevation of Privilege
– Version Number: 1.0