MS10-095: Vulnerability in Microsoft Windows could allow remote code execution

INTRODUCTION

Microsoft has released security bulletin MS10-095. To view the complete security bulletin, visit one of the following Microsoft websites:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

More Information

This vulnerability occurs if a particular library file does not exist in the default location. By default, the DLL is only present on Windows versions that are released with BranchCache support. However, all Windows 7 and Windows Server 2008 R2 versions could be vulnerable if the BranchCache DLL does not exist in the default location. For more information about the affected versions, see the security bulletin:

http:⁠//www.microsoft.com/technet/security/bulletin/MS10-095.mspx

FILE INFORMATION

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows 7 and Windows Server 2008 R2 file information

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.1.7600.16xxx Windows 7 and Windows Server 2008 R2 RTM GDR
    6.1.7600.20xxx Windows 7 and Windows Server 2008 R2 RTM LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7 and Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 7

File name File version File size Date Time Platform
Webio.dll 6.1.7600.16688 314,368 16-Oct-2010 04:36 x86
Webio.dll 6.1.7600.20817 314,368 15-Oct-2010 04:31 x86

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File name File version File size Date Time Platform
Webio.dll 6.1.7600.16688 395,776 16-Oct-2010 05:19 x64
Webio.dll 6.1.7600.20817 395,776 15-Oct-2010 05:38 x64
Webio.dll 6.1.7600.16688 314,368 16-Oct-2010 04:36 x86
Webio.dll 6.1.7600.20817 314,368 15-Oct-2010 04:31 x86

For all supported IA-64-based versions of Windows Server 2008 R2

File name File version File size Date Time Platform
Webio.dll 6.1.7600.16688 690,176 16-Oct-2010 04:12 IA-64
Webio.dll 6.1.7600.20817 690,176 15-Oct-2010 04:20 IA-64
Webio.dll 6.1.7600.16688 314,368 16-Oct-2010 04:36 x86
Webio.dll 6.1.7600.20817 314,368 15-Oct-2010 04:31 x86

Additional file information for Windows 7 and Windows Server 2008 R2

Additional files for all supported x86-based versions of Windows 7

File name Package_1_for_kb2385678_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File version Not applicable
File size 1,783
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_1_for_kb2385678~31bf3856ad364e35~x86~~6.1.1.0.mum
File version Not applicable
File size 2,483
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_2_for_kb2385678_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File version Not applicable
File size 1,788
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_2_for_kb2385678~31bf3856ad364e35~x86~~6.1.1.0.mum
File version Not applicable
File size 2,488
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_3_for_kb2385678_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File version Not applicable
File size 1,768
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_3_for_kb2385678~31bf3856ad364e35~x86~~6.1.1.0.mum
File version Not applicable
File size 2,468
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_for_kb2385678_rtm_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File version Not applicable
File size 2,389
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_for_kb2385678_rtm~31bf3856ad364e35~x86~~6.1.1.0.mum
File version Not applicable
File size 2,440
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Update-bf.mum
File version Not applicable
File size 1,859
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name X86_bf986e10e6c48c75784c2d85746165df_31bf3856ad364e35_6.1.7600.16688_none_78b07927b2dff768.manifest
File version Not applicable
File size 693
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name X86_c19f075144e8f897036c43efc4cad69e_31bf3856ad364e35_6.1.7600.20817_none_04b25f3b59b33ea5.manifest
File version Not applicable
File size 693
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name X86_microsoft-windows-webio_31bf3856ad364e35_6.1.7600.16688_none_5cc396d140041367.manifest
File version Not applicable
File size 2,484
Date (UTC) 16-Oct-2010
Time (UTC) 05:08
Platform Not applicable
File name X86_microsoft-windows-webio_31bf3856ad364e35_6.1.7600.20817_none_5d97e4ac58e9d36a.manifest
File version Not applicable
File size 2,484
Date (UTC) 15-Oct-2010
Time (UTC) 04:58
Platform Not applicable

Additional files for all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File name Amd64_01644122b29bee22087191fe662d2d51_31bf3856ad364e35_6.1.7600.20817_none_20e5c3b76b2b425d.manifest
File version Not applicable
File size 697
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Amd64_0c3e5271eecdc87d81f0888bf954a8b5_31bf3856ad364e35_6.1.7600.20817_none_43f2d5d847ae4f29.manifest
File version Not applicable
File size 697
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Amd64_61bf4722842d6b0e7a192aa17814f88c_31bf3856ad364e35_6.1.7600.16688_none_5950eaf8886c69c1.manifest
File version Not applicable
File size 697
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Amd64_6e41bcb6433fa0e59d22e885a420f70e_31bf3856ad364e35_6.1.7600.20817_none_df57b7f660502cdf.manifest
File version Not applicable
File size 1,036
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Amd64_b3e62176383b9c71f8ff0d4d188eb42e_31bf3856ad364e35_6.1.7600.16688_none_9f1bc247d0838c73.manifest
File version Not applicable
File size 697
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Amd64_e2e0ba0398caacf68dfb7f1bf6d93002_31bf3856ad364e35_6.1.7600.16688_none_a12674ff5a9cbbad.manifest
File version Not applicable
File size 1,036
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Amd64_microsoft-windows-webio_31bf3856ad364e35_6.1.7600.16688_none_b8e23254f861849d.manifest
File version Not applicable
File size 2,488
Date (UTC) 16-Oct-2010
Time (UTC) 05:56
Platform Not applicable
File name Amd64_microsoft-windows-webio_31bf3856ad364e35_6.1.7600.20817_none_b9b68030114744a0.manifest
File version Not applicable
File size 2,488
Date (UTC) 15-Oct-2010
Time (UTC) 06:05
Platform Not applicable
File name Package_1_for_kb2385678_bf~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not applicable
File size 1,793
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_1_for_kb2385678~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not applicable
File size 2,497
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_2_for_kb2385678_bf~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not applicable
File size 2,212
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_2_for_kb2385678~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not applicable
File size 4,077
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_3_for_kb2385678_bf~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not applicable
File size 2,016
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_3_for_kb2385678~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not applicable
File size 3,877
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_4_for_kb2385678_bf~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not applicable
File size 1,985
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_4_for_kb2385678~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not applicable
File size 2,909
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_for_kb2385678_rtm_bf~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not applicable
File size 3,303
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_for_kb2385678_rtm~31bf3856ad364e35~amd64~~6.1.1.0.mum
File version Not applicable
File size 3,382
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Update-bf.mum
File version Not applicable
File size 2,503
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Wow64_microsoft-windows-webio_31bf3856ad364e35_6.1.7600.16688_none_c336dca72cc24698.manifest
File version Not applicable
File size 2,486
Date (UTC) 16-Oct-2010
Time (UTC) 05:03
Platform Not applicable
File name Wow64_microsoft-windows-webio_31bf3856ad364e35_6.1.7600.20817_none_c40b2a8245a8069b.manifest
File version Not applicable
File size 2,486
Date (UTC) 15-Oct-2010
Time (UTC) 04:53
Platform Not applicable

Additional files for all supported IA-64-based versions of Windows Server 2008 R2

File name Ia64_01644122b29bee22087191fe662d2d51_31bf3856ad364e35_6.1.7600.20817_none_c4c8cc29b2cbda23.manifest
File version Not applicable
File size 696
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Ia64_61bf4722842d6b0e7a192aa17814f88c_31bf3856ad364e35_6.1.7600.16688_none_fd33f36ad00d0187.manifest
File version Not applicable
File size 696
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Ia64_a7e1bb70554ec694d0b8b1bf8db58c74_31bf3856ad364e35_6.1.7600.20817_none_6b54ff3937053f9b.manifest
File version Not applicable
File size 695
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Ia64_d1d4cd215f45a8581c22766a6cedee62_31bf3856ad364e35_6.1.7600.16688_none_ed138023023f8595.manifest
File version Not applicable
File size 695
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Ia64_microsoft-windows-webio_31bf3856ad364e35_6.1.7600.16688_none_5cc53ac740021c63.manifest
File version Not applicable
File size 2,486
Date (UTC) 16-Oct-2010
Time (UTC) 05:52
Platform Not applicable
File name Ia64_microsoft-windows-webio_31bf3856ad364e35_6.1.7600.20817_none_5d9988a258e7dc66.manifest
File version Not applicable
File size 2,486
Date (UTC) 15-Oct-2010
Time (UTC) 05:47
Platform Not applicable
File name Package_1_for_kb2385678_bf~31bf3856ad364e35~ia64~~6.1.1.0.mum
File version Not applicable
File size 1,794
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_1_for_kb2385678~31bf3856ad364e35~ia64~~6.1.1.0.mum
File version Not applicable
File size 3,648
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_2_for_kb2385678_bf~31bf3856ad364e35~ia64~~6.1.1.0.mum
File version Not applicable
File size 2,010
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_2_for_kb2385678~31bf3856ad364e35~ia64~~6.1.1.0.mum
File version Not applicable
File size 3,867
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_for_kb2385678_rtm_bf~31bf3856ad364e35~ia64~~6.1.1.0.mum
File version Not applicable
File size 1,940
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Package_for_kb2385678_rtm~31bf3856ad364e35~ia64~~6.1.1.0.mum
File version Not applicable
File size 1,975
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Update-bf.mum
File version Not applicable
File size 1,673
Date (UTC) 18-Oct-2010
Time (UTC) 12:11
Platform Not applicable
File name Wow64_microsoft-windows-webio_31bf3856ad364e35_6.1.7600.16688_none_c336dca72cc24698.manifest
File version Not applicable
File size 2,486
Date (UTC) 16-Oct-2010
Time (UTC) 05:03
Platform Not applicable
File name Wow64_microsoft-windows-webio_31bf3856ad364e35_6.1.7600.20817_none_c40b2a8245a8069b.manifest
File version Not applicable
File size 2,486
Date (UTC) 15-Oct-2010
Time (UTC) 04:53
Platform Not applicable