MS15-054: Vulnerability in Microsoft Management Console file format could allow denial of service: May 12, 2015

Applies To
Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows RT 8.1 Windows Server 2012 Datacenter Windows Server 2012 Datacenter Windows Server 2012 Standard Windows Server 2012 Standard Windows Server 2012 Essentials Windows Server 2012 Foundation Windows Server 2012 Foundation Windows 8 Enterprise Windows 8 Pro Windows 8 Windows RT Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows Server 2008 R2 Web Edition Windows Server 2008 R2 Foundation Windows 7 Service Pack 1 Windows 7 Ultimate Windows 7 Enterprise Windows 7 Professional Windows 7 Home Premium Windows 7 Home Basic Windows 7 Starter Windows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows Server 2008 Foundation Windows Server 2008 for Itanium-Based Systems Windows Vista Service Pack 2 Windows Vista Ultimate Windows Vista Enterprise Windows Vista Business Windows Vista Home Premium Windows Vista Home Basic Windows Vista Starter

Summary

This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow denial of service if a remote, unauthenticated attacker convinces a user to open a share that contains a specially crafted .msc file. However, an attacker would have no way of forcing a user to visit the share or view the file.

Introduction

Microsoft has released security bulletin MS15-054. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

More Information

Security update deployment information

Windows Vista (all editions)Reference Table

The following table contains the security update information for this software.

Security update file names For all supported 32-bit editions of Windows Vista:
Windows6.0-KB3051768-x86.msu
For all supported x64-based editions of Windows Vista:
Windows6.0-KB3051768-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement Yes, you must restart your system after you apply this security update.
Removal information WUSA.exe does not support uninstall of updates. To uninstall an update that is installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows Server 2008 (all editions)Reference Table

The following table contains the security update information for this software.

Security update file names For all supported 32-bit editions of Windows Server 2008:
Windows6.0-KB3051768-x86.msu
For all supported x64-based editions of Windows Server 2008:
Windows6.0-KB3051768-x64.msu
For all supported Itanium-based editions of Windows Server 2008:
Windows6.0-KB3051768-ia64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement Yes, you must restart your system after you apply this security update.
Removal information WUSA.exe does not support uninstall of updates. To uninstall an update that is installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows 7 (all editions)Reference Table

The following table contains the security update information for this software.

Security update file name For all supported 32-bit editions of Windows 7:
Windows6.1-KB3051768-x86.msu
For all supported x64-based editions of Windows 7:
Windows6.1-KB3051768-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement Yes, you must restart your system after you apply this security update.
Removal information To uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, and then click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows Server 2008 R2 (all editions)Reference Table

The following table contains the security update information for this software.

Security update file name For all supported x64-based editions of Windows Server 2008 R2:
Windows6.1-KB3051768-x64.msu
For all supported Itanium-based editions of Windows Server 2008 R2:
Windows6.1-KB3051768-ia64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement Yes, you must restart your system after you apply this security update.
Removal information To uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, and then click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows 8 and Windows 8.1 (all editions)Reference Table

The following table contains the security update information for this software.

Security update file name For all supported 32-bit editions of Windows 8:
Windows8-RT-KB3051768-x86.msu
For all supported x64-based editions of Windows 8:
Windows8-RT-KB3051768-x64.msu
For all supported 32-bit editions of Windows 8.1:
Windows8.1-KB3051768-x86.msu
For all supported x64-based editions of Windows 8.1:
Windows8.1-KB3051768-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement Yes, you must restart your system after you apply this security update.
Removal information To uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, click System and Security, and then click Windows Update. Under See also, click Installed updates, and then select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows Server 2012 and Windows Server 2012 R2 (all editions)Reference Table

The following table contains the security update information for this software.

Security update file name For all supported editions of Windows Server 2012:
Windows8-RT-KB3051768-x64.msu
For all supported editions of Windows Server 2012 R2:
Windows8.1-KB3051768-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement Yes, you must restart your system after you apply this security update.
Removal information To uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, click System and Security, and then click Windows Update. Under See also, click Installed updates, and then select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows RT and Windows RT 8.1 (all editions)Reference Table

The following table contains the security update information for this software.

Deployment These updates are available through Windows Update only.
Restart Requirement Yes, you must restart your system after you apply this security update.
Removal Information Click Control Panel, click System and Security, and then click Windows Update. Under See also, click Installed updates, and then select from the list of updates.
File Information See the file information section.

      

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows Vista and Windows Server 2008 file information
  • The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.0.6002.18xxx Windows Vista SP2 and Windows Server 2008 SP2 SP2 GDR
    6.0.6002.23xxx Windows Vista SP2 and Windows Server 2008 SP2 SP2 LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows Vista and Windows Server 2008

File name File version File size Date Time Platform
Comctl32.dll 6.10.6002.19355 1,686,016 06-Apr-2015 00:57 x86
Comctl32.dll 6.10.6002.23663 1,686,016 06-Apr-2015 00:27 x86

For all supported x64-based versions of Windows Vista and Windows Server 2008

File name File version File size Date Time Platform
Comctl32.dll 6.10.6002.19355 2,050,048 06-Apr-2015 00:36 x64
Comctl32.dll 6.10.6002.23663 2,050,048 06-Apr-2015 00:20 x64
Comctl32.dll 6.10.6002.19355 1,686,016 06-Apr-2015 00:57 x86
Comctl32.dll 6.10.6002.23663 1,686,016 06-Apr-2015 00:27 x86

For all supported IA-64-based versions of Windows Server 2008

File name File version File size Date Time Platform
Comctl32.dll 6.10.6002.19355 4,726,272 06-Apr-2015 00:18 IA-64
Comctl32.dll 6.10.6002.23663 4,726,272 05-Apr-2015 23:58 IA-64
Comctl32.dll 6.10.6002.19355 1,686,016 06-Apr-2015 00:57 x86
Comctl32.dll 6.10.6002.23663 1,686,016 06-Apr-2015 00:27 x86

      

Windows 7 and Windows Server 2008 R2 file information
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.1.7601.18xxx Windows 7 and Windows Server 2008 R2 SP1 GDR
    6.1.7601.22xxx Windows 7 and Windows Server 2008 R2 SP1 LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 7

File name File version File size Date Time Platform
Comctl32.dll 6.10.7601.18807 1,680,896 30-Mar-2015 03:02 x86
Comctl32.dll 6.10.7601.23011 1,680,896 30-Mar-2015 03:00 x86

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File name File version File size Date Time Platform
Comctl32.dll 6.10.7601.18807 2,030,592 30-Mar-2015 03:15 x64
Comctl32.dll 6.10.7601.23011 2,030,592 30-Mar-2015 03:15 x64
Comctl32.dll 6.10.7601.18807 1,680,896 30-Mar-2015 03:02 x86
Comctl32.dll 6.10.7601.23011 1,680,896 30-Mar-2015 03:00 x86

For all supported IA-64-based versions of Windows Server 2008 R2

File name File version File size Date Time Platform
Comctl32.dll 6.10.7601.18807 4,762,624 30-Mar-2015 02:14 IA-64
Comctl32.dll 6.10.7601.23011 4,762,624 30-Mar-2015 02:15 IA-64
Comctl32.dll 6.10.7601.18807 1,680,896 30-Mar-2015 03:02 x86
Comctl32.dll 6.10.7601.23011 1,680,896 30-Mar-2015 03:00 x86

      

Windows 8 and Windows Server 2012 file information
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.2.920 0.16 xxx Windows 8 and Windows Server 2012 RTM GDR
    6.2.920 0.20 xxx Windows 8 and Windows Server 2012 RTM LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8

File name File version File size Date Time Platform
Comctl32.dll 6.10.9200.17321 2,050,048 30-Mar-2015 00:52 x86
Comctl32.dll 6.10.9200.21435 2,046,976 30-Mar-2015 03:08 x86

For all supported x64-based versions of Windows 8 and Windows Server 2012

File name File version File size Date Time Platform
Comctl32.dll 6.10.9200.17321 2,517,504 30-Mar-2015 01:51 x64
Comctl32.dll 6.10.9200.21435 2,512,896 30-Mar-2015 01:24 x64
Comctl32.dll 6.10.9200.17321 2,050,048 30-Mar-2015 00:52 x86
Comctl32.dll 6.10.9200.21435 2,046,976 30-Mar-2015 03:08 x86

      

Windows 8.1 and Windows Server 2012 R2 file information

For all supported x86-based versions of Windows 8.1

File name File version File size Date Time Platform
Comctl32.dll 6.10.9600.17784 2,106,368 27-Mar-2015 03:21 x86

For all supported x64-based versions of Windows 8.1 and Windows Server 2012 R2

File name File version File size Date Time Platform
Comctl32.dll 6.10.9600.17784 2,583,040 27-Mar-2015 04:21 x64
Comctl32.dll 6.10.9600.17784 2,106,368 27-Mar-2015 03:21 x86

      

File hash information
File name SHA1 hash SHA256 hash
Windows6.0-KB3051768-ia64.msu A721E4FEE3337CE8996CBBD75CF4492A024FC10B B87A02F31079B6CD09EDE92038895922FB62001932BFF2A8B20B60609CB7655D
Windows6.0-KB3051768-x64.msu A7C7A39E7D0C445492FF4E432F95A5D58ED75040 8B14FC759F06E92B0AF42463698DE3966BAAAC6615787FA7AEEF4B7DC94CD08C
Windows6.0-KB3051768-x86.msu DACC660C5A964E1731757AB6168D94199CD6E63C 5AF6B620392EBE206865E6B184F751AA0B2336C379523596C38D42498A8BAE84
Windows6.1-KB3051768-ia64.msu 28DFD99D01BE25BD4CBFE42E3B3639C4A70E7B2A 606FE532C45A4D377E1C4F59CE35A2C63BAF39DE74D3C466B58076938E07CC75
Windows6.1-KB3051768-x64.msu 8CF8A28CB94E39C4FC0B5EE4A9889E23257F2B56 BD7D0A2C8E27F723F43907795B9598AF4856972F078D7E583E8EE8BD34595E38
Windows6.1-KB3051768-x86.msu EF2F5E719AC73630EC28DA21253A68F84F8EFE25 9D3BD7EE8E308D00DD65FF9892782C49C4F217469B06D59953765CE9BC466284
Windows8.1-KB3051768-x64.msu A9746AD755E76CAA8EE74FB8DEAAE8E7845307CE 1BC8C1A083A9A25C4F4AD11990ABD636EF28FEA6325BC40C0612E2DDC40F2D9D
Windows8.1-KB3051768-x86.msu A7A5E0DD623EB2CDD628C032DC80941E49F0585D AE9789E1BF138FCC143A0B44FC1F5543A4131DAF711212B89867B76D98866BBC
Windows8-RT-KB3051768-x64.msu 2262E6450B50AE406B73ABC91AB889451668A0A8 A3EB6FF0F3E5C53CA33C3C9C763C301F8AA4FC1742802033F1D4ADBF1699F194
Windows8-RT-KB3051768-x86.msu 383FB996B99EEA09AD3AF226431072C6B34EEC60 CE0B07084E2231749EA40B087A432DD78088325595C334FE550DA39C5048E04A