Windows Update is offering me Security Update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1. Microsoft says “This security update resolves a vulnerability in the Microsoft .NET Framework 3.5.1 that could allow elevation of privilege on a server system if a user views a specially crafted webpage by using a web browser that can run ASP.NET applications.”
It seems that this patch was originally issued Dec 10, 2013, and then re-issued Sept 9, 2014.
However, I do not see it mentioned in Susan’s Patch Watch column, or in any forum here at the Windows Secrets Lounge.
Can anyone suggest whether it is safe to install?
My machine is running 64-bit Win 7 Pro SP1.
Thank you.