Microsoft Silverlight & .NET Framework CLR Virtual Method Delegate Code Execution Vulnerability

Bugtraq ID:	42295
Class:	Unknown
CVE:	CVE-2010-1898
Remote:	Yes
Local:	No
Published:	Aug 10 2010 12:00AM
Updated:	Sep 29 2010 09:10PM
Credit:	Eamon Nerbonne
Vulnerable:	Microsoft Silverlight 3.0 Microsoft Silverlight 2.0 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 Microsoft .NET Framework 2.0 SP2 Microsoft .NET Framework 2.0 SP1 Microsoft .NET Framework 2.0
Not Vulnerable:

Microsoft Silverlight & .NET Framework CLR Virtual Method Delegate Code Execution Vulnerability

Microsoft Silverlight and Microsoft .NET Framework are prone to a remote code-execution vulnerability.

Successful exploits will allow the attacker to execute arbitrary code within the context of the application. Failed exploit attempts will likely result in a denial-of-service condition.

Microsoft Silverlight & .NET Framework CLR Virtual Method Delegate Code Execution Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

Microsoft Silverlight & .NET Framework CLR Virtual Method Delegate Code Execution Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for more information.


Microsoft .NET Framework 3.5 SP1

• Microsoft Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2
  http://www.microsoft.com/downloads/details.aspx?familyid=77d0c428-237c -4dab-9645-6400dd9e65f8


• Microsoft Security Update for Microsoft .NET Framework 3.5 Service Pack 1, Windows Vista Service Pack 2, and W
  http://www.microsoft.com/downloads/details.aspx?familyid=7712e8ad-dea4 -4a43-8a7b-dc154510c104


• Microsoft Security Update for Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 2.0 Service Pack
  http://www.microsoft.com/downloads/details.aspx?familyid=1e53f250-2d4b -4f61-86ee-9f9f3a9c0b48


• Microsoft Security Update for Microsoft .NET Framework 3.5 Service Pack 1 on Windows Vista Service Pack 1 and
  http://www.microsoft.com/downloads/details.aspx?familyid=155bbb5c-247e -4bed-a287-527d978b7967

Microsoft Silverlight 3.0

• Microsoft Security Update for Microsoft Silverlight (KB978464)
  http://www.microsoft.com/downloads/details.aspx?familyid=7e3f6c16-1339 -49bc-a60c-ddc6c3a54850&displaylang=en

Microsoft .NET Framework 2.0 SP2

• Microsoft Security Update for Microsoft .NET Framework 3.5 Service Pack 1 on Windows Vista Service Pack 1 and
  http://www.microsoft.com/downloads/details.aspx?familyid=155bbb5c-247e -4bed-a287-527d978b7967


• Microsoft Security Update for Microsoft .NET Framework 3.5 Service Pack 1 and .NET Framework 2.0 Service Pack
  http://www.microsoft.com/downloads/details.aspx?familyid=1e53f250-2d4b -4f61-86ee-9f9f3a9c0b48


• Microsoft Security Update for Microsoft .NET Framework 3.5 Service Pack 1, Windows Vista Service Pack 2, and W
  http://www.microsoft.com/downloads/details.aspx?familyid=7712e8ad-dea4 -4a43-8a7b-dc154510c104

Microsoft .NET Framework 2.0 SP1

• Microsoft Security Update for Microsoft .NET Framework 3.5, Windows Vista Service Pack 1 and Windows Server 20
  http://www.microsoft.com/downloads/details.aspx?familyid=616c39f7-137a -40b9-b691-bc33c0aef7e1

Microsoft Silverlight 2.0

• Microsoft Security Update for Microsoft Silverlight (KB978464)
  http://www.microsoft.com/downloads/details.aspx?familyid=7e3f6c16-1339 -49bc-a60c-ddc6c3a54850&displaylang=en

Microsoft .NET Framework 3.5

• Microsoft Security Update for Microsoft .NET Framework 3.5 on Windows Server 2003 and Windows XP
  http://www.microsoft.com/downloads/details.aspx?familyid=648cfca5-19eb -4658-a6ad-fe546c4c44b9


• Microsoft Security Update for Microsoft .NET Framework 3.5, Windows Vista Service Pack 1 and Windows Server 20
  http://www.microsoft.com/downloads/details.aspx?familyid=616c39f7-137a -40b9-b691-bc33c0aef7e1

Microsoft Silverlight & .NET Framework CLR Virtual Method Delegate Code Execution Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Security Bulletin MS10-060 (Microsoft)