Article ID: 928365
Article Last Modified on 12/3/2007
APPLIES TO
- Microsoft .NET Framework 2.0, when used with:
- Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
- Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
- Microsoft Windows Server 2003, Standard Edition (32-bit x86)
- Microsoft Windows Server 2003, Web Edition
- Microsoft Windows XP Home Edition
- Microsoft Windows XP Media Center Edition 2002
- Microsoft Windows XP Professional
- Microsoft Windows XP Starter Edition
- Microsoft Windows XP Tablet PC Edition
- Microsoft Windows 2000 Advanced Server
- Microsoft Windows 2000 Datacenter Server
- Microsoft Windows 2000 Professional Edition
- Microsoft Windows 2000 Server
INTRODUCTION
Microsoft has released security bulletin MS07-040. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:
- Home users:
Skip the details: Download the updates for your home computer or laptop from the Microsoft Update Web site now:
- IT professionals:
MORE INFORMATION
Known issues
In the following section are the known issues with this security update. If you have problems with this security update that are not addressed by these known issues, no-charge support is available for consumers by calling 1-866-PCSAFETY in the United States and Canada or by contacting your local Microsoft subsidiary. For more information about how to contact your local Microsoft subsidiary for security update support issues, visit the International Support Web site:
Enterprise customers can obtain support for security updates through their usual support contacts.
Known issues during installation of the update
- You receive a Windows Update error code "0x643" or a Windows Installer error code "1603" when you try to install an update for the .NET Framework 1.0, 1.1, or 2.0
For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:923100 When you try to install an update for the .NET Framework 1.0, 1.1, or 2.0, you may receive Windows Update error code"0x643" or Windows Installer error code"1603"
- You receive a "The folder 'Program Files' contains an invalid character" error message when you try to install a security update for the .NET Framework 2.0
For more information about this issue when you install a security update on the 64-bit versions of Windows Server 2003, click the following article number to view the article in the Microsoft Knowledge Base:923101 Error message when you try to install a security update for the .NET Framework 2.0 on a computer that is running Windows Server 2003 x64 Edition: "Error 1324. The folder 'Program Files' contains an invalid character"
Known issues that may occur after the update is installed
- Certain Unicode characters in the path of the executable file are displayed as "?" when you create an application that is built on the Microsoft .NET Framework 2.0, and you use the Application.ExecutablePath property to obtain the path of the executable file
For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:943804 FIX: Certain Unicode characters returned by the Application.ExecutablePath property in the .NET Framework 2.0 are displayed as "?"
- You receive a "This application has requested the Runtime to terminate in an unusual way" error message when you uninstall a security update for the Microsoft .NET Framework 1.1
For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:934711 Error message when you restart the computer after you uninstall a security update for the .NET Framework 1.1:"This application has requested the Runtime to terminate in an unusual way"
- You receive error messages after you install security update 931212
For more information about the error messages, click the following article numbers to view the articles in the Microsoft Knowledge Base:940947 Error message after you install security update 931212 (MS07-040) in Windows 2000 with Service Pack 4: " Error 127: The specified procedure could not be found"
941386 FIX: Error message when you run an ASP.NET 2.0 Web application that is built on the .NET Framework 2.0 after you install the MS07-040 security update: "Type 'System.Web.HttpHeaderCollection' is not marked as serializable"
941789 You receive error messages after you install security update 931212 (MS07-040) on a Windows SharePoint Services 3.0 Web front-end server or on a SharePoint Server 2007 Web front-end server
942086 FIX: Error message when you run an ASP.NET 2.0 Web application that is built on the .NET Framework 2.0: "The constructor to deserialize an object of type '<custom object>' was not found"
- Other issues that may occur after you install a security update for the .NET Framework 2.0 that is greater than or equal to build 2.0.50727.832
- The performance of the server may decrease and adding users or uploading files may fail with the error message "403 Forbidden error" after you install a Microsoft .NET Framework 2.0 hotfix
For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:934793 Description of the SharePoint Server 2007 hotfix package: April 12, 2007
- You may be unable to execute SQL Server 2005 Integration Services (SSIS) packages that contain script tasks or script components
For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:931846 You may be unable to execute SQL Server 2005 Integration Services packages that contain script tasks or script components
- When you run an application or try to access a Web site on the computer, you may receive the following error message:
For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:
939949 Error message when you run an application or try to access a Web site on a computer that has a particular .NET Framework 2.0 software update installed: "Culture name 'Culture' is not supported"
- When you click Add Link to Site on the Sites page to add a new link to the Site Directory on a Microsoft Office SharePoint Portal Server 2003 portal site, and then you click either OK or Cancel, the "Add Link to Site" page stops responding.
Additionally, the link is not added to the Site Directory. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:934229 The "Add Link to Site" page stops responding, and the link is not added when you try to add a new link to the Site Directory in a SharePoint Portal Server 2003 site
- The performance of the server may decrease and adding users or uploading files may fail with the error message "403 Forbidden error" after you install a Microsoft .NET Framework 2.0 hotfix
More information about this security update
After you install this security update, the behavior of UTF8Encoding, UnicodeEncoding, and UTF32Encoding change to comply with the Unicode 5.0 requirements for Unicode encodings. Invalid bytes are not removed. Instead, they are replaced by the Unicode character U+FFFD, the Unicode replacement character.
For more information about this behavior, click the following article number to view the article in the Microsoft Knowledge Base:
940521 The behavior of UTF8Encoding, UnicodeEncoding, and UTF32Encoding changes to comply to the Unicode 5.0 requirements for Unicode encodings after you install the security update for the .NET Framework 2.0 that is described in security bulletin MS07-040
Update removal information
To remove this security update, use the Add or Remove Programs item in Control Panel.
Prerequisites
To install this security update, you must have Microsoft Windows Installer 3.1 installed on the computer. To obtain the latest version of Windows Installer for the computer, visit the following Microsoft Web site:
Additionally, the computer must be running one of the following operating systems:
- A 32-bit version of Windows Server 2003 with Service Pack 1 (SP1) or of Windows Server 2003 with Service Pack 2 (SP2)
- An Itanium-based version of Windows Server 2003 with SP1 or of Windows Server 2003 with SP2
- A 64-bit version of Windows Server 2003 with SP1 or of Windows Server 2003 with SP2
- Microsoft Windows XP with Service Pack 2 (SP2)
- Microsoft Windows 2000 with Service Pack 4 (SP4)
Additional query words: update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS security update patch bulletin .NET Framework 2.0 flaw vulnerability malicious attacker exploit
Keywords: kbresolve kbexpertisebeginner kbqfe kbsecurity kbsecbulletin kbsecvulnerability kbbug kbfix kbpubtypekc KB928365
