This host is missing a critical security update according to Microsoft Bulletin MS12-035.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms12-035

The flaws are due to - An error within the .NET Framework does not properly serialize user input and can be exploited to treat untrusted input as trusted. - An error within the .NET Framework does not properly handle exceptions when serializing objects and can be exploited via partially trusted assemblies.

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4

• http://secunia.com/advisories/49117
• http://support.microsoft.com/kb/2693777
• http://technet.microsoft.com/en-us/security/bulletin/ms12-035
• http://www.securitytracker.com/id/1027036

---

Updated on 2015-03-25