MS15-060: Vulnerability in Microsoft common controls could allow remote code execution: June 9, 2015

Applies To
Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows RT 8.1 Windows Server 2012 Datacenter Windows Server 2012 Datacenter Windows Server 2012 Standard Windows Server 2012 Standard Windows Server 2012 Essentials Windows Server 2012 Foundation Windows Server 2012 Foundation Windows 8 Enterprise Windows 8 Pro Windows 8 Windows RT Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows Server 2008 R2 Web Edition Windows Server 2008 R2 Foundation Windows 7 Service Pack 1 Windows 7 Ultimate Windows 7 Enterprise Windows 7 Professional Windows 7 Home Premium Windows 7 Home Basic Windows 7 Starter Windows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows Server 2008 Foundation Windows Server 2008 for Itanium-Based Systems Windows Vista Service Pack 2 Windows Vista Ultimate Windows Vista Enterprise Windows Vista Business Windows Vista Home Premium Windows Vista Home Basic Windows Vista Starter

Summary

This security update resolves a vulnerability in Windows that could allow remote code execution if a user clicks a specially crafted link or a link to specially crafted content and then invokes F12 developer tools in Internet Explorer.

Introduction

Microsoft has released security bulletin MS15-060. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

More Information

Note This security update updates both versions 5 and 6 of Comctl32.dll. Comctl32.dll is always updated from the C:\Windows\WinSxs (Side By Side folder) folder. In other words, comctl32.dll is always used from the WinSxs folder. Therefore, this security update will update Comctl32.dll in C:\Windows\WinSxs folder. For more information about the versions of comctl32.dll, visit the following Microsoft MSDN webpage:

Common Control Versions

Security update deployment information

Windows Vista (all editions)Reference table

The following table contains the security update information for this software.

Security update file names For all supported 32-bit editions of Windows Vista:
Windows6.0-KB3059317-x86.msu
For all supported x64-based editions of Windows Vista:
Windows6.0-KB3059317-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement You must restart your system after you apply this security update.
Removal information WUSA.exe does not support the removal of updates. To uninstall an update that was installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows Server 2008 (all editions)

Reference table

The following table contains the security update information for this software.

Security update file names For all supported 32-bit editions of Windows Server 2008:
Windows6.0-KB3059317-x86.msu
For all supported x64-based editions of Windows Server 2008:
Windows6.0-KB3059317-x64.msu
For all supported Itanium-based editions of Windows Server 2008:
Windows6.0-KB3059317-ia64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement You must restart your system after you apply this security update.
Removal information WUSA.exe does not support the removal of updates. To uninstall an update that was installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows 7 (all editions)

Reference table

The following table contains the security update information for this software.

Security update file name For all supported 32-bit editions of Windows 7:
Windows6.1-KB3059317-x86.msu
For all supported x64-based editions of Windows 7:
Windows6.1-KB3059317-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement You must restart your system after you apply this security update.
Removal information To uninstall an update that was installed by WUSA, use the /Uninstall setup switch, or click Control Panel, click System and Security, and then under Windows Update, click View installed updates, and select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows Server 2008 R2 (all editions)

Reference table

The following table contains the security update information for this software.

Security update file name For all supported x64-based editions of Windows Server 2008 R2:
Windows6.1-KB3059317-x64.msu
For all supported Itanium-based editions of Windows Server 2008 R2:
Windows6.1-KB3059317-ia64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement You must restart your system after you apply this security update.
Removal information To uninstall an update that was installed by WUSA, use the /Uninstall setup switch, or click Control Panel, click System and Security, and then under Windows Update, click View installed updates, and select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows 8 and Windows 8.1 (all editions)

Reference table

The following table contains the security update information for this software.

Security update file name For all supported 32-bit editions of Windows 8:
Windows8-RT-KB3059317-x86.msu
For all supported x64-based editions of Windows 8:
Windows8-RT-KB3059317-x64.msu
For all supported 32-bit editions of Windows 8.1:
Windows8.1-KB3059317-x86.msu
For all supported x64-based editions of Windows 8.1:
Windows8.1-KB3059317-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement You must restart your system after you apply this security update.
Removal information To uninstall an update that was installed by WUSA, use the /Uninstall setup switch, or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates, and select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows Server 2012 and Windows Server 2012 R2 (all editions)

Reference table

The following table contains the security update information for this software.

Security update file name For all supported editions of Windows Server 2012:
Windows8-RT-KB3059317-x64.msu
For all supported editions of Windows Server 2012 R2:
Windows8.1-KB3059317-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement You must restart your system after you apply this security update.
Removal information To uninstall an update that was installed by WUSA, use the /Uninstall setup switch, or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates, and select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows RT and Windows RT 8.1 (all editions)

Reference table

The following table contains the security update information for this software.

Deployment These updates are available through Windows Update only.
Restart requirement You must restart your system after you apply this security update.
Removal information Click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates, and select from the list of updates.
File information See the file information section.

      

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows Vista and Windows Server 2008 file information

  • The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.0.6002.18xxx Windows Vista SP2 and Windows Server 2008 SP2 SP2 GDR
    6.0.6002.23xxx Windows Vista SP2 and Windows Server 2008 SP2 SP2 LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows Vista and Windows Server 2008

File name File version File size Date Time Platform
Comctl32.dll 5.82.6002.19373 532,480 24-Apr-2015 15:54 x86
Comctl32.dll 5.82.6002.23681 532,480 24-Apr-2015 15:30 x86
Comctl32.dll 5.82.6002.19373 532,480 24-Apr-2015 15:54 x86
Comctl32.dll 5.82.6002.23681 532,480 24-Apr-2015 15:30 x86
Comctl32.dll 6.10.6002.19373 1,686,016 24-Apr-2015 15:54 x86
Comctl32.dll 6.10.6002.23681 1,686,016 24-Apr-2015 15:30 x86

For all supported x64-based versions of Windows Vista and Windows Server 2008

File name File version File size Date Time Platform
Comctl32.dll 5.82.6002.19373 633,856 24-Apr-2015 15:41 x64
Comctl32.dll 5.82.6002.23681 633,856 24-Apr-2015 15:21 x64
Comctl32.dll 5.82.6002.19373 633,856 24-Apr-2015 15:40 x64
Comctl32.dll 5.82.6002.23681 633,856 24-Apr-2015 15:21 x64
Comctl32.dll 6.10.6002.19373 2,050,048 24-Apr-2015 15:40 x64
Comctl32.dll 6.10.6002.23681 2,050,048 24-Apr-2015 15:21 x64
Comctl32.dll 5.82.6002.19373 532,480 24-Apr-2015 15:54 x86
Comctl32.dll 5.82.6002.23681 532,480 24-Apr-2015 15:30 x86
Comctl32.dll 5.82.6002.19373 532,480 24-Apr-2015 15:54 x86
Comctl32.dll 5.82.6002.23681 532,480 24-Apr-2015 15:30 x86
Comctl32.dll 6.10.6002.19373 1,686,016 24-Apr-2015 15:54 x86
Comctl32.dll 6.10.6002.23681 1,686,016 24-Apr-2015 15:30 x86

For all supported IA-64-based versions of Windows Server 2008

File name File version File size Date Time Platform
Comctl32.dll 5.82.6002.19373 1,633,792 24-Apr-2015 15:21 IA-64
Comctl32.dll 5.82.6002.23681 1,633,792 24-Apr-2015 15:01 IA-64
Comctl32.dll 5.82.6002.19373 1,633,792 24-Apr-2015 15:21 IA-64
Comctl32.dll 5.82.6002.23681 1,633,792 24-Apr-2015 15:01 IA-64
Comctl32.dll 6.10.6002.19373 4,726,272 24-Apr-2015 15:21 IA-64
Comctl32.dll 6.10.6002.23681 4,726,272 24-Apr-2015 15:01 IA-64
Comctl32.dll 5.82.6002.19373 532,480 24-Apr-2015 15:54 x86
Comctl32.dll 5.82.6002.23681 532,480 24-Apr-2015 15:30 x86
Comctl32.dll 5.82.6002.19373 532,480 24-Apr-2015 15:54 x86
Comctl32.dll 5.82.6002.23681 532,480 24-Apr-2015 15:30 x86
Comctl32.dll 6.10.6002.19373 1,686,016 24-Apr-2015 15:54 x86
Comctl32.dll 6.10.6002.23681 1,686,016 24-Apr-2015 15:30 x86

      

Windows 7 and Windows Server 2008 R2 file information

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.1.7601.18xxx Windows 7 and Windows Server 2008 R2 SP1 GDR
    6.1.7601.22xxx Windows 7 and Windows Server 2008 R2 SP1 LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 7

File name File version File size Date Time Platform
Comctl32.dll 5.82.7601.18837 530,432 24-Apr-2015 17:56 x86
Comctl32.dll 5.82.7601.23039 530,432 24-Apr-2015 18:00 x86
Comctl32.dll 5.82.7601.18837 530,432 24-Apr-2015 17:56 x86
Comctl32.dll 5.82.7601.23039 530,432 24-Apr-2015 18:00 x86
Comctl32.dll 6.10.7601.18837 1,680,896 24-Apr-2015 17:54 x86
Comctl32.dll 6.10.7601.23039 1,680,896 24-Apr-2015 17:57 x86

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File name File version File size Date Time Platform
Comctl32.dll 5.82.7601.18837 633,856 24-Apr-2015 18:17 x64
Comctl32.dll 5.82.7601.23039 633,856 24-Apr-2015 18:23 x64
Comctl32.dll 5.82.7601.18837 633,856 24-Apr-2015 18:17 x64
Comctl32.dll 5.82.7601.23039 633,856 24-Apr-2015 18:23 x64
Comctl32.dll 6.10.7601.18837 2,030,592 24-Apr-2015 18:12 x64
Comctl32.dll 6.10.7601.23039 2,030,592 24-Apr-2015 18:15 x64
Comctl32.dll 5.82.7601.18837 530,432 24-Apr-2015 17:56 x86
Comctl32.dll 5.82.7601.23039 530,432 24-Apr-2015 18:00 x86
Comctl32.dll 5.82.7601.18837 530,432 24-Apr-2015 17:56 x86
Comctl32.dll 5.82.7601.23039 530,432 24-Apr-2015 18:00 x86
Comctl32.dll 6.10.7601.18837 1,680,896 24-Apr-2015 17:54 x86
Comctl32.dll 6.10.7601.23039 1,680,896 24-Apr-2015 17:57 x86

For all supported IA-64-based versions of Windows Server 2008 R2

File name File version File size Date Time Platform
Comctl32.dll 5.82.7601.18837 1,627,136 24-Apr-2015 17:17 IA-64
Comctl32.dll 5.82.7601.23039 1,627,136 24-Apr-2015 17:18 IA-64
Comctl32.dll 5.82.7601.18837 1,627,136 24-Apr-2015 17:17 IA-64
Comctl32.dll 5.82.7601.23039 1,627,136 24-Apr-2015 17:18 IA-64
Comctl32.dll 6.10.7601.18837 4,763,136 24-Apr-2015 17:12 IA-64
Comctl32.dll 6.10.7601.23039 4,763,136 24-Apr-2015 17:14 IA-64
Comctl32.dll 5.82.7601.18837 530,432 24-Apr-2015 17:56 x86
Comctl32.dll 5.82.7601.23039 530,432 24-Apr-2015 18:00 x86
Comctl32.dll 5.82.7601.18837 530,432 24-Apr-2015 17:56 x86
Comctl32.dll 5.82.7601.23039 530,432 24-Apr-2015 18:00 x86
Comctl32.dll 6.10.7601.18837 1,680,896 24-Apr-2015 17:54 x86
Comctl32.dll 6.10.7601.23039 1,680,896 24-Apr-2015 17:57 x86

      

Windows 8 and Windows Server 2012 file information

  • The files that apply to a specific product, milestone (RTM,SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.2.920 0.16 xxx Windows 8 and Windows Server 2012 RTM GDR
    6.2.920 0.20 xxx Windows 8 and Windows Server 2012 RTM LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8

File name File version File size Date Time Platform
Comctl32.dll 5.82.9200.17359 541,696 25-Apr-2015 03:41 x86
Comctl32.dll 5.82.9200.21472 541,184 25-Apr-2015 03:05 x86
Comctl32.dll 5.82.9200.17359 541,696 25-Apr-2015 03:41 x86
Comctl32.dll 5.82.9200.21472 541,184 25-Apr-2015 03:05 x86
Comctl32.dll 6.10.9200.17359 2,050,048 25-Apr-2015 00:34 x86
Comctl32.dll 6.10.9200.21472 2,046,464 25-Apr-2015 00:25 x86

For all supported x64-based versions of Windows 8 and Windows Server 2012

File name File version File size Date Time Platform
Comctl32.dll 5.82.9200.17359 652,288 24-Apr-2015 23:13 x64
Comctl32.dll 5.82.9200.21472 652,288 24-Apr-2015 23:35 x64
Comctl32.dll 5.82.9200.17359 652,288 24-Apr-2015 23:13 x64
Comctl32.dll 5.82.9200.21472 652,288 24-Apr-2015 23:35 x64
Comctl32.dll 6.10.9200.17359 2,516,992 24-Apr-2015 22:42 x64
Comctl32.dll 6.10.9200.21472 2,512,384 24-Apr-2015 22:18 x64
Comctl32.dll 5.82.9200.17359 541,696 25-Apr-2015 03:41 x86
Comctl32.dll 5.82.9200.21472 541,184 25-Apr-2015 03:05 x86
Comctl32.dll 5.82.9200.17359 541,696 25-Apr-2015 03:41 x86
Comctl32.dll 5.82.9200.21472 541,184 25-Apr-2015 03:05 x86
Comctl32.dll 6.10.9200.17359 2,050,048 25-Apr-2015 00:34 x86
Comctl32.dll 6.10.9200.21472 2,046,464 25-Apr-2015 00:25 x86

      

Windows 8.1 and Windows Server 2012 R2 file information

  • The files that apply to a specific product, milestone (RTM,SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.3.920 0.16 xxx Windows 8.1 and Windows Server 2012 R2 RTM GDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8.1

File name File version File size Date Time Platform
Comctl32.dll 5.82.9600.17810 549,888 25-Apr-2015 02:33 x86
Comctl32.dll 5.82.9600.17810 549,888 25-Apr-2015 02:33 x86
Comctl32.dll 6.10.9600.17810 2,105,856 25-Apr-2015 02:34 x86

For all supported x64-based versions of Windows 8.1 and Windows Server 2012 R2

File name File version File size Date Time Platform
Comctl32.dll 5.82.9600.17810 653,824 25-Apr-2015 02:34 x64
Comctl32.dll 5.82.9600.17810 653,824 25-Apr-2015 02:34 x64
Comctl32.dll 6.10.9600.17810 2,582,528 25-Apr-2015 02:49 x64
Comctl32.dll 5.82.9600.17810 549,888 25-Apr-2015 02:33 x86
Comctl32.dll 5.82.9600.17810 549,888 25-Apr-2015 02:33 x86
Comctl32.dll 6.10.9600.17810 2,105,856 25-Apr-2015 02:34 x86

      

File hash information
File name SHA1 hash SHA256 hash
Windows6.0-KB3059317-ia64.msu 3475094F9E8312A9F195903F899230A66EB101FD ECF066EF0163A9066E2279800352DE40FFB567B771483FF6FB9DCBC4D4D3AE38
Windows6.0-KB3059317-x64.msu 7FF015670262DE15BBFCFBA1F4631C5E2D662CB3 1E1B039B85B123F71B6659E9A6F6A1C73051446FC20B306725B224A31BB64FAA
Windows6.0-KB3059317-x64.msu 7FF015670262DE15BBFCFBA1F4631C5E2D662CB3 1E1B039B85B123F71B6659E9A6F6A1C73051446FC20B306725B224A31BB64FAA
Windows6.0-KB3059317-x64.msu 7FF015670262DE15BBFCFBA1F4631C5E2D662CB3 1E1B039B85B123F71B6659E9A6F6A1C73051446FC20B306725B224A31BB64FAA
Windows6.0-KB3059317-x86.msu A3F336EAE73F4A0CFD2B533C122936600A1C8BC3 CBD8549439B21E1C64A3F02BBB1D9CE494067D80F642357950F035A88142A4DD
Windows6.0-KB3059317-x86.msu A3F336EAE73F4A0CFD2B533C122936600A1C8BC3 CBD8549439B21E1C64A3F02BBB1D9CE494067D80F642357950F035A88142A4DD
Windows6.0-KB3059317-x86.msu A3F336EAE73F4A0CFD2B533C122936600A1C8BC3 CBD8549439B21E1C64A3F02BBB1D9CE494067D80F642357950F035A88142A4DD
Windows6.1-KB3059317-ia64.msu B7D538385DD2B9C5E35AEA75403C999058734506 98EF90B664ECCB4A5904F821938FB594188CC2B1134B5A965B8C6ABD92A0B4AC
Windows6.1-KB3059317-x64.msu B68DB33239BDDCB59E881252CFC7B79D58A2F26B EDC0E9FA8752DE0326752A2F86D64155A11F88B2BF295B796103B9773C8016A3
Windows6.1-KB3059317-x64.msu B68DB33239BDDCB59E881252CFC7B79D58A2F26B EDC0E9FA8752DE0326752A2F86D64155A11F88B2BF295B796103B9773C8016A3
Windows6.1-KB3059317-x64.msu B68DB33239BDDCB59E881252CFC7B79D58A2F26B EDC0E9FA8752DE0326752A2F86D64155A11F88B2BF295B796103B9773C8016A3
Windows6.1-KB3059317-x86.msu 7DBAD42DD71389BB65948B81220FC019D77C8B77 D8058F4AF5F1E7E115BDE740562402B9694991D04FB26DA62E82FF3446631B1B
Windows8.1-KB3059317-arm.msu B541778DE9D9B005F151464010CDC4E41BF8E02B 9BB834E454FCE51EDD0611543D2B7CC0AA5F11D6CA774C8EBBDDE09785548791
Windows8.1-KB3059317-x64.msu 4271D612EF3F3C57904458748FAAD85F0C56DAD0 C51453ADC985E2CF3FB8D4EFE66C09FA5E6CFEE49185B995E32996530B94C376
Windows8.1-KB3059317-x64.msu 4271D612EF3F3C57904458748FAAD85F0C56DAD0 C51453ADC985E2CF3FB8D4EFE66C09FA5E6CFEE49185B995E32996530B94C376
Windows8.1-KB3059317-x64.msu 4271D612EF3F3C57904458748FAAD85F0C56DAD0 C51453ADC985E2CF3FB8D4EFE66C09FA5E6CFEE49185B995E32996530B94C376
Windows8.1-KB3059317-x86.msu CD13FF75515E4BA5664D4CDF8C961A26BC45DFC8 725D8AB475B8B97D23F7F6C733E935C7032427E7EB3022842FDBA534EC86EA69
Windows8-RT-KB3059317-arm.msu E0F76B8D803E836252B1754E4F89D85E960295AF 8E8E44C7E6BC7FDBA4FCB661128C778255B3E7390736142C2F230C5F36575961
Windows8-RT-KB3059317-x64.msu 52A1DBABBC14312737BDD7414E61AECED02050CC 9B4808BC37E2B16B6936A3BE65C1BC8E2CD45D156CB8197EFA3C10F45AE382D3
Windows8-RT-KB3059317-x64.msu 52A1DBABBC14312737BDD7414E61AECED02050CC 9B4808BC37E2B16B6936A3BE65C1BC8E2CD45D156CB8197EFA3C10F45AE382D3
Windows8-RT-KB3059317-x64.msu 52A1DBABBC14312737BDD7414E61AECED02050CC 9B4808BC37E2B16B6936A3BE65C1BC8E2CD45D156CB8197EFA3C10F45AE382D3
Windows8-RT-KB3059317-x86.msu D1C359CAE9FCD3EE717545ADFA47912F05F9B99B 89AD3A545C0DEC6520B8BA06B9F344FD2350B0D3306E9C897865B1E964230124