CVE:CVE-2011-3417
CNNVD:CNNVD-201112-495
ASP.NET是一套由Microsoft分发的帮助开发者构建基于WEB应用的系统。
Microsoft .NET Framework在处理缓存内容的方式上存在权限许可和访问控制漏洞。攻击者可利用该漏洞通过发送特制的链接并诱使用户打开此类链接，执行任意恶意代码。
solution:Upgrade microsoft windows_7 to a higher version than -,-:sp1,and avoid the version -:sp1; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than *:r2,*:sp2,-:sp2,r2,and avoid the version *:r2,*:sp2,-:sp2,r2; Upgrade microsoft windows_vista to a higher version than *:sp2,-:sp2,and avoid the version *:sp2,-:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,sp3:unknown,and avoid the version *:sp2,sp3:unknown