This host is missing an important security update according to Microsoft Bulletin MS13-015.

Successful exploitation could allow an attacker to execute arbitrary code. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms13-015

The flaw is due to an error when handling permissions of a callback function when a certain WinForm object is created and can be exploited to bypass CAS (Code Access Security) restrictions via a specially crafted XAML Browser Application (XBAP) or an untrusted .NET application.

Microsoft .NET Framework 4 Microsoft .NET Framework 4.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 2.0 Service Pack 2

• http://secunia.com/advisories/52143/
• http://support.microsoft.com/kb/2800277
• http://technet.microsoft.com/en-us/security/bulletin/ms13-015

---

Updated on 2015-03-25