Microsoft KB Archive/928367

= Description of the security update for the .NET Framework 1.0 Service Pack 3 for Windows Vista, Windows Server 2003, Windows XP, and Windows 2000: July 10, 2007 =

Article ID: 928367

Article Last Modified on 12/3/2007

-

APPLIES TO

 Microsoft .NET Framework 1.0 Service Pack 3, when used with:  Windows Vista Business

 Windows Vista Enterprise

 Windows Vista Home Basic

 Windows Vista Home Premium</li></ul>

 Windows Vista Starter</li></ul>

 Windows Vista Ultimate</li></ul>

 Microsoft Windows Server 2003, Standard Edition (32-bit x86)</li></ul>

 Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)</li></ul>

 Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)</li></ul>

 Microsoft Windows Server 2003, Web Edition</li></ul>

 Microsoft Windows XP Home Edition</li></ul>

 Microsoft Windows XP Professional</li></ul>

<ul> <li>Microsoft Windows XP Starter Edition</li></ul>

<ul> <li>Microsoft Windows 2000 Professional Edition</li></ul>

<ul> <li>Microsoft Windows 2000 Server</li></ul>

<ul> <li>Microsoft Windows 2000 Advanced Server</li></ul>

<ul> <li>Microsoft Windows 2000 Datacenter Server</li></ul> </li></ul>

-

<div class="notice_section">

<div class="notice_section">

For a Microsoft Windows XP Media Center and Microsoft Windows XP Tablet PC version of this article, see 930494.

<div class="summary_section">

INTRODUCTION
Microsoft has released security bulletin MS07-040. The security bulletin contains all the relevant information about the security update for the programs that are listed in the &quot;Applies to&quot; section. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites: <ul> <li>Home users:

http://www.microsoft.com/protect/computer/updates/bulletins/200707.mspx

</li> <li>IT professionals:

http://www.microsoft.com/technet/security/bulletin/ms07-040.mspx

</li></ul>

<div class="moreinformation_section">

Update removal information
To remove this update, use the Add or Remove Programs item in Control Panel.

Prerequisites
<ul> <li>To install this security update, you must have Microsoft Windows Installer 3.1 installed on your computer. To obtain the latest version of Windows Installer for your computer, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=889482fc-5f56-4a38-b838-de776fd4138c

</li> <li>To install this security update, your computer must be running one of the following operating systems: <ul> <li>A 32-bit version of Microsoft Windows Server 2003 with Service Pack 1 (SP1) or Service Pack 2 (SP2)</li> <li>An Itanium-based version of Windows Server 2003 with SP1 or with SP2</li> <li>An x64-based version of Windows Server 2003 with SP1 or with SP2</li> <li>Microsoft Windows XP with SP2</li> <li>Microsoft Windows 2000 with Service Pack 4 (SP4)</li> <li>Windows Vista</li></ul> </li></ul>

Known issues
<ul> <li>For more information about installation issues with Microsoft .NET Framework 1.0, click the following article numbers to view the articles in the Microsoft Knowledge Base:

934712 Warning message when you try to install a .NET Framework 1.0 or a .NET Framework 1.1 security update on a Windows Vista-based computer: &quot;An unidentified program wants access to your computer&quot;

939160 The file version is rolled back to the version that was installed by the last service pack when you remove some security updates for the .NET Framework 1.1 or for the .NET Framework 1.0

</li> <li>For more information about other issues that occur after you install the security update for the Microsoft .NET Framework 1.0, click the following article number to view the article in the Microsoft Knowledge Base:

936597 The application or control does not run when you try to run .NET Framework 1.0 HREF tags to point to a managed executable application or to a control

</li> <li>For more information about installation issues that may occur when you install the security update together with the Microsoft .NET Framework 1.1, click the following article number to view the article in the Microsoft Knowledge Base:

940332 Error message when you install an update for the .NET Framework 1.1 or for the .NET Framework 1.0: &quot;The upgrade patch cannot be installed by the Windows Installer service&quot;

</li> <li>For more information about installation issues that may occur when you install the security update together with the Microsoft .NET Framework 2.0, click the following article number to view the article in the Microsoft Knowledge Base:

923100 When you try to install an update for the .NET Framework 1.0, 1.1, or 2.0, you may receive Windows Update error code &quot;0x643&quot; or Windows Installer error code &quot;1603&quot;

</li></ul>

Additional query words: .NET Framework 1.0 update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE WinNT Win2000

Keywords: kbhowto kbmsccsearch kbsecbulletin kbsecvulnerability kbsecurity kbfix kbbug kbpubtypekc kbexpertisebeginner KB928367

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.