Microsoft .NET Desktop Runtime 7.0.13: Download the New Version and Stay Secure

Microsoft has recently released a new version of .NET Desktop Runtime, version 7.0.13, to address a critical security vulnerability that could allow attackers to inject arbitrary commands into backend FTP servers. This advisory provides guidance on what developers can do to update their applications to patch this vulnerability.

The vulnerability, identified as CVE-2023-36558, is an elevation of privilege vulnerability in .NET where untrusted URIs provided to the system can be used to inject arbitrary commands to backend FTP servers. This could allow attackers to execute malicious code and gain unauthorized access to sensitive data or systems.

Microsoft has released a security advisory to provide information about this vulnerability and offer guidance on how developers can update their applications to address it. The advisory provides steps for updating .NET Core SDK and runtime versions, as well as guidance on how to configure the ASP.NET Core Module for IIS.

In addition to addressing this critical security vulnerability, the new version of .NET Desktop Runtime also includes several other improvements and updates. For example, the latest .NET Docker samples show various ways to use .NET Docker images, which have been updated for this release.

Developers can try running the latest .NET Docker samples by using the following command: `docker run -rm /dotnet/samples`. This will give them a chance to explore the new features and improvements in the latest version of .NET.

The new version of .NET Desktop Runtime also includes an updated ASP.NET Core Module for IIS, which can be installed separately on servers without installing the full SDK. This makes it easier for developers to host stand-alone apps on Windows Servers, regardless of whether they are running x64, Arm, Arm64, or Arm32 Alpine systems.

To download the latest version of .NET Desktop Runtime, developers can visit the official Microsoft website and search for the .NET 7.0 release. The latest 7.0 release is always listed at the top of the page, making it easy to find and install the newest version.

In conclusion, the new version of .NET Desktop Runtime 7.0.13 addresses a critical security vulnerability and includes several other improvements and updates. Developers should take advantage of this opportunity to update their applications and stay secure in today's ever-evolving threat landscape.

Microsoft .NET Desktop Runtime 7.0.13 download the new version