MS15-083: Vulnerability in Server Message Block could allow remote code execution: August 11, 2015

Applies To
Windows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows Server 2008 Foundation Windows Server 2008 for Itanium-Based Systems Windows Vista Service Pack 2 Windows Vista Ultimate Windows Vista Enterprise Windows Vista Business Windows Vista Home Premium Windows Vista Home Basic Windows Vista Starter

Note On September 8 2015, Microsoft re-released MS15-083 to comprehensively address issues with Security Update KB3073921. Customers running Windows Vista or Windows Server 2008 who installed the 3073921 update before the September 8 2015 re-release should reapply the update.

Summary

This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker sends a specially crafted string to SMB server error logging.

To learn more about the vulnerability, see Microsoft Security Bulletin MS15-083.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see
Get security updates automatically.

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Click the download link in Microsoft Security Bulletin MS15-083 that corresponds to the version of Windows that you are running.

More Information

Security update deployment information

Windows Vista (all editions)Reference Table

The following table contains the security update information for this software.

Security update file names For all supported 32-bit editions of Windows Vista:
Windows6.0-KB3073921-v2-x86.msu
For all supported x64-based editions of Windows Vista:
Windows6.0-KB3073921-v2-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement You must restart your system after you apply this security update.
Removal information WUSA.exe does not support the removal of updates. To uninstall an update that was installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See the file information section
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows Server 2008 (all editions)Reference Table

The following table contains the security update information for this software.

Security update file names For all supported 32-bit editions of Windows Server 2008:
Windows6.0-KB3073921-v2-x86.msu
For all supported x64-based editions of Windows Server 2008:
Windows6.0-KB3073921-v2-x64.msu
For all supported Itanium-based editions of Windows Server 2008:
Windows6.0-KB3073921-v2-ia64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement You must restart your system after you apply this security update.
Removal information WUSA.exe does not support the removal of updates. To uninstall an update that was installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See the file information section
Registry key verification Note A registry key does not exist to validate the presence of this update.

See the file information section.

File hash information
Package Name Package Hash SHA 1 Package Hash SHA 2
Windows6.0-KB3073921-v2-ia64.msu 05F214D4B19EFEB2353CF029DAA4D5DFBD5B2DF6 D58FCB5A194D01D6DAC7F727AC22B79A628F6AAF82F3775B66B3B3D1FD03BBD6
Windows6.0-KB3073921-v2-x64.msu 88FBB1258180959445DFCF65F6738933E6A58555 5806B2E578C0F3CC336B4C32E143F1E99EFF386FF5141A33152F0AEE0F7218D3
Windows6.0-KB3073921-v2-x86.msu BEC5FA1DBF93C2B552143DEAE5F954B7C0D86A64 BE69BB76E2F8BA91E477CFF1632E1B49F102AAFA61C39C751F751D09EAB9ABD7

      

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows Vista and Windows Server 2008 file information

  • The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.0.6002.19xxx Windows Vista SP2 and Windows Server 2008 SP2 SP2 GDR
    6.0.6002.23xxx Windows Vista SP2 and Windows Server 2008 SP2 SP2 LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows Vista and Windows Server 2008

File name File version File size Date Time Platform
Srvnet.sys 6.0.6002.19478 102,912 13-Aug-2015 14:15 x86
Srvnet.sys 6.0.6002.23788 102,912 13-Aug-2015 14:17 x86
Srv.sys 6.0.6002.19478 304,640 13-Aug-2015 14:15 x86
Srv.sys 6.0.6002.23788 305,152 13-Aug-2015 14:18 x86

For all supported x64-based versions of Windows Vista and Windows Server 2008

File name File version File size Date Time Platform
Srvnet.sys 6.0.6002.19478 294,912 13-Aug-2015 14:21 IA-64
Srvnet.sys 6.0.6002.23788 295,424 13-Aug-2015 14:19 IA-64
Srv.sys 6.0.6002.19478 966,144 13-Aug-2015 14:21 IA-64
Srv.sys 6.0.6002.23788 967,168 13-Aug-2015 14:19 IA-64

For all supported IA-64-based versions of Windows Server 2008

File name File version File size Date Time Platform
Srvnet.sys 6.0.6002.19478 145,920 13-Aug-2015 14:36 x64
Srvnet.sys 6.0.6002.23788 146,944 13-Aug-2015 14:42 x64
Srv.sys 6.0.6002.19478 450,560 13-Aug-2015 14:36 x64
Srv.sys 6.0.6002.23788 449,536 13-Aug-2015 14:43 x64

      

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support