MS10-102: Vulnerability in Hyper-V could allow denial of service

Microsoft has released security bulletin MS10-102. To view the complete security bulletin, visit one of the following Microsoft websites:

• Home users:
  http://www.microsoft.com/security/updates/bulletins/201012.aspx

  (http://www.microsoft.com/security/updates/bulletins/201012.aspx)
  Skip the details: Download the updates for your home computer or laptop from the Microsoft Update website now:
  http://update.microsoft.com/microsoftupdate/

  (http://update.microsoft.com/microsoftupdate/)
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/MS10-102.mspx

  (http://www.microsoft.com/technet/security/bulletin/MS10-102.mspx)

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Known issues with this security update

The following are the known issues that customers may experience when uninstalling this security update.

Note We do not recommend that customers uninstall this security update because that exposes the system to the vulnerability that is described in this article.

• Uninstallation of this security update requires an additional restart because Microsoft Virtual Network Switch (VMSP) will not start after the first restart. The uninstallation process will not prompt for this additional restart. The restart must be initiated by the network administrator manually. Without this additional restart step, network services on the host and the guest operating systems might not start. Although the host computer might be available for remote administration through Remote Desktop, we strongly recommend that the host be restarted again to make sure that the VMSP is started. Use the following items to diagnose this problem:
  • The Task manager shows that the computer does not have Network access.
    Collapse this imageExpand this image

    
  • The Hyper-V Virtual Network Manager displays the following error message:
    
    There was an error enumerating the machines network switches. Make sure the Hyper-V networking service is installed and working properly.
    
    You might not have permission to perform this task.
    Collapse this imageExpand this image

    
  • In the Hyper-V Network event log, the following event error will be logged:
    
    Event ID 14108
    Unable to open handle to switch driver, error = 21477942402
    Collapse this imageExpand this image

    

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows Server 2008 file information

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
  Collapse this tableExpand this table

  Version	Product	Milestone	Service branch
  6.0.6000.16xxx	Windows Vista	RTM	GDR
  6.0.6000.20xxx	Windows Vista	RTM	LDR
  6.0.6001.18xxx	Windows Vista SP1 and Windows Server 2008 SP1	SP1	GDR
  6.0.6001.22xxx	Windows Vista SP1 and Windows Server 2008 SP1	SP1	LDR
  6.0.6002.18xxx	Windows Vista SP2 and Windows Server 2008 SP2	SP2	GDR
  6.0.6002.22xxx	Windows Vista SP2 and Windows Server 2008 SP2	SP2	LDR

• Service Pack 1 is integrated into the release version of Windows Server 2008. Therefore, RTM milestone files apply only to Windows Vista. RTM milestone files have a 6.0.0000.xxxxxx version number.
• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
• The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.

For all supported x64-based versions of Windows Server 2008

Additional file information for Windows Server 2008

Additional files for all supported x64-based versions of Windows Server 2008

Windows Server 2008 R2 file information

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
  
  Collapse this tableExpand this table

  Version	Product	Milestone	Service branch
  6.1.7600. 16xxx	Windows 7 and Windows Server 2008 R2	RTM	GDR
  6.1.7600. 20xxx	Windows 7 and Windows Server 2008 R2	RTM	LDR

• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
• The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7 and Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x64-based versions of Windows Server 2008 R2

Additional file information for Windows Server 2008 R2

Additional files for all supported x64-based versions of Windows 7 and Windows Server 2008 R2