Applies ToWindows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows Server 2008 Foundation Windows Server 2008 for Itanium-Based Systems Windows Vista Service Pack 2 Windows Vista Ultimate Windows Vista Enterprise Windows Vista Business Windows Vista Home Premium Windows Vista Home Basic Windows Vista Starter

Summary

This security update fixes vulnerabilities in the VBScript scripting engine in Windows. The more severe of the vulnerabilities could allow remote code execution if an attacker hosts a specially crafted website that's designed to exploit the vulnerabilities through Internet Explorer (or if an attacker leverages a compromised website or a website that accepts or hosts user-provided content or advertisements) and then convinces a user to view the website. An attacker could also embed an ActiveX control marked as "safe for initialization" in an application or Microsoft Office document that uses the Internet Explorer rendering engine to direct the user to the specially crafted website. To learn more about the vulnerability, see Microsoft Security Bulletin MS15-126.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to get and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.Note For Windows RT and Windows RT 8.1, this update is available through Windows Update only.

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.Click the download link in Microsoft Security Bulletin MS15-126 that corresponds to the version of Windows that you're running.

More Information

Help for installing updates: Support for Microsoft UpdateSecurity solutions for IT professionals: TechNet Security Troubleshooting and SupportHelp for protecting your Windows-based computer from viruses and malware: Virus Solution and Security CenterLocal support according to your country: International Support

File Information

File name

SHA1 hash

SHA256 hash

Windows6.0-KB3105579-x86.msu

BFBF538746B04FEEC540809027D4EC7DBB48C692

D974C6E9EF1BB0766544C94908D8EED48CC022C3AC8E21511231195933D0032B

Windows6.0-KB3105579-ia64.msu

4BF27B82067AB21A41C3DFB041FD060DE8EEB65F

161E681DEAEF8FC786717C9C09CB62183CAE61FA579AD69514C33031A2AE7D4D

Windows6.0-KB3105579-x64.msu

692DF3729689645ACCA65384EAB576F693067C57

69A461747AA217F00FB20CAC71735CDFE820874ECE6D40AB477F9D2A84A4E7BB

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Be aware that dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time bias. The dates and times may also change when you perform certain operations on the files.

Windows Vista and Windows Server 2008 file information

Notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version

    Product

    Milestone

    Service branch

    6.0.600 2.19xxx

    Windows Vista or Windows Server 2008

    SP2

    GDR

    6.0.600 2.23xxx

    Windows Vista or Windows Server 2008

    SP2

    LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions

File name

File version

File size

Date

Time

Platform

Jscript.dll

5.7.6002.19549

516,096

13-Nov-2015

16:56

x86

Jscript.dll

5.7.6002.23859

516,096

13-Nov-2015

16:32

x86

Vbscript.dll

5.7.6002.19549

434,176

13-Nov-2015

16:57

x86

Vbscript.dll

5.7.6002.23859

434,176

13-Nov-2015

16:33

x86

For all supported ia64-based versions

File name

File version

File size

Date

Time

Platform

Jscript.dll

5.7.6002.19549

1,394,688

13-Nov-2015

16:27

IA-64

Jscript.dll

5.7.6002.23859

1,395,200

13-Nov-2015

16:02

IA-64

Vbscript.dll

5.7.6002.19549

1,173,504

13-Nov-2015

16:29

IA-64

Vbscript.dll

5.7.6002.23859

1,175,040

13-Nov-2015

16:03

IA-64

Jscript.dll

5.7.6002.19549

516,096

13-Nov-2015

16:56

x86

Jscript.dll

5.7.6002.23859

516,096

13-Nov-2015

16:32

x86

Vbscript.dll

5.7.6002.19549

434,176

13-Nov-2015

16:57

x86

Vbscript.dll

5.7.6002.23859

434,176

13-Nov-2015

16:33

x86

For all supported x64-based versions

File name

File version

File size

Date

Time

Platform

Jscript.dll

5.7.6002.19549

755,200

13-Nov-2015

16:42

x64

Jscript.dll

5.7.6002.23859

755,200

13-Nov-2015

16:37

x64

Vbscript.dll

5.7.6002.19549

582,656

13-Nov-2015

16:43

x64

Vbscript.dll

5.7.6002.23859

583,168

13-Nov-2015

16:38

x64

Jscript.dll

5.7.6002.19549

516,096

13-Nov-2015

16:56

x86

Jscript.dll

5.7.6002.23859

516,096

13-Nov-2015

16:32

x86

Vbscript.dll

5.7.6002.19549

434,176

13-Nov-2015

16:57

x86

Vbscript.dll

5.7.6002.23859

434,176

13-Nov-2015

16:33

x86

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.