Summary

This security update resolves a vulnerability in Windows that could allow remote code execution if a user clicks a specially crafted link or a link to specially crafted content and then invokes F12 developer tools in Internet Explorer.

Introduction

Microsoft has released security bulletin MS15-060. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates:Support for Microsoft UpdateSecurity solutions for IT professionals:TechNet Security Troubleshooting and SupportHelp protect your Windows-based computer from viruses and malware:Virus Solution and Security CenterLocal support according to your country:International Support

More Information

Note This security update updates both versions 5 and 6 of Comctl32.dll. Comctl32.dll is always updated from the C:\Windows\WinSxs (Side By Side folder) folder. In other words, comctl32.dll is always used from the WinSxs folder. Therefore, this security update will update Comctl32.dll in C:\Windows\WinSxs folder. For more information about the versions of comctl32.dll, visit the following Microsoft MSDN webpage:

Common Control Versions

Windows Vista (all editions)Reference tableThe following table contains the security update information for this software.

Security update file names

For all supported 32-bit editions of Windows Vista:Windows6.0-KB3059317-x86.msu

For all supported x64-based editions of Windows Vista:Windows6.0-KB3059317-x64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

You must restart your system after you apply this security update.

Removal information

WUSA.exe does not support the removal of updates. To uninstall an update that was installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See the file information section.

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows Server 2008 (all editions) Reference tableThe following table contains the security update information for this software.

Security update file names

For all supported 32-bit editions of Windows Server 2008:Windows6.0-KB3059317-x86.msu

For all supported x64-based editions of Windows Server 2008:Windows6.0-KB3059317-x64.msu

For all supported Itanium-based editions of Windows Server 2008:Windows6.0-KB3059317-ia64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

You must restart your system after you apply this security update.

Removal information

WUSA.exe does not support the removal of updates. To uninstall an update that was installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.

File information

See the file information section.

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows 7 (all editions) Reference tableThe following table contains the security update information for this software.

Security update file name

For all supported 32-bit editions of Windows 7:Windows6.1-KB3059317-x86.msu

For all supported x64-based editions of Windows 7:Windows6.1-KB3059317-x64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

You must restart your system after you apply this security update.

Removal information

To uninstall an update that was installed by WUSA, use the /Uninstall setup switch, or click Control Panel, click System and Security, and then under Windows Update, click View installed updates, and select from the list of updates.

File information

See the file information section.

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows Server 2008 R2 (all editions) Reference tableThe following table contains the security update information for this software.

Security update file name

For all supported x64-based editions of Windows Server 2008 R2:Windows6.1-KB3059317-x64.msu

For all supported Itanium-based editions of Windows Server 2008 R2:Windows6.1-KB3059317-ia64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

You must restart your system after you apply this security update.

Removal information

To uninstall an update that was installed by WUSA, use the /Uninstall setup switch, or click Control Panel, click System and Security, and then under Windows Update, click View installed updates, and select from the list of updates.

File information

See the file information section.

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows 8 and Windows 8.1 (all editions)Reference tableThe following table contains the security update information for this software.

Security update file name

For all supported 32-bit editions of Windows 8:Windows8-RT-KB3059317-x86.msu

For all supported x64-based editions of Windows 8:Windows8-RT-KB3059317-x64.msu

For all supported 32-bit editions of Windows 8.1:Windows8.1-KB3059317-x86.msu

For all supported x64-based editions of Windows 8.1:Windows8.1-KB3059317-x64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

You must restart your system after you apply this security update.

Removal information

To uninstall an update that was installed by WUSA, use the /Uninstall setup switch, or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates, and select from the list of updates.

File information

See the file information section.

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows Server 2012 and Windows Server 2012 R2 (all editions) Reference tableThe following table contains the security update information for this software.

Security update file name

For all supported editions of Windows Server 2012:Windows8-RT-KB3059317-x64.msu

For all supported editions of Windows Server 2012 R2:Windows8.1-KB3059317-x64.msu

Installation switches

See Microsoft Knowledge Base Article 934307

Restart requirement

You must restart your system after you apply this security update.

Removal information

To uninstall an update that was installed by WUSA, use the /Uninstall setup switch, or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates, and select from the list of updates.

File information

See the file information section.

Registry key verification

Note A registry key does not exist to validate the presence of this update.

Windows RT and Windows RT 8.1 (all editions) Reference tableThe following table contains the security update information for this software.

Deployment

These updates are available through Windows Update only.

Restart requirement

You must restart your system after you apply this security update.

Removal information

Click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates, and select from the list of updates.

File information

See the file information section.

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

  • The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version

    Product

    Milestone

    Service branch

    6.0.6002.18xxx

    Windows Vista SP2 and Windows Server 2008 SP2

    SP2

    GDR

    6.0.6002.23xxx

    Windows Vista SP2 and Windows Server 2008 SP2

    SP2

    LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows Vista and Windows Server 2008

File name

File version

File size

Date

Time

Platform

Comctl32.dll

5.82.6002.19373

532,480

24-Apr-2015

15:54

x86

Comctl32.dll

5.82.6002.23681

532,480

24-Apr-2015

15:30

x86

Comctl32.dll

5.82.6002.19373

532,480

24-Apr-2015

15:54

x86

Comctl32.dll

5.82.6002.23681

532,480

24-Apr-2015

15:30

x86

Comctl32.dll

6.10.6002.19373

1,686,016

24-Apr-2015

15:54

x86

Comctl32.dll

6.10.6002.23681

1,686,016

24-Apr-2015

15:30

x86

For all supported x64-based versions of Windows Vista and Windows Server 2008

File name

File version

File size

Date

Time

Platform

Comctl32.dll

5.82.6002.19373

633,856

24-Apr-2015

15:41

x64

Comctl32.dll

5.82.6002.23681

633,856

24-Apr-2015

15:21

x64

Comctl32.dll

5.82.6002.19373

633,856

24-Apr-2015

15:40

x64

Comctl32.dll

5.82.6002.23681

633,856

24-Apr-2015

15:21

x64

Comctl32.dll

6.10.6002.19373

2,050,048

24-Apr-2015

15:40

x64

Comctl32.dll

6.10.6002.23681

2,050,048

24-Apr-2015

15:21

x64

Comctl32.dll

5.82.6002.19373

532,480

24-Apr-2015

15:54

x86

Comctl32.dll

5.82.6002.23681

532,480

24-Apr-2015

15:30

x86

Comctl32.dll

5.82.6002.19373

532,480

24-Apr-2015

15:54

x86

Comctl32.dll

5.82.6002.23681

532,480

24-Apr-2015

15:30

x86

Comctl32.dll

6.10.6002.19373

1,686,016

24-Apr-2015

15:54

x86

Comctl32.dll

6.10.6002.23681

1,686,016

24-Apr-2015

15:30

x86

For all supported IA-64-based versions of Windows Server 2008

File name

File version

File size

Date

Time

Platform

Comctl32.dll

5.82.6002.19373

1,633,792

24-Apr-2015

15:21

IA-64

Comctl32.dll

5.82.6002.23681

1,633,792

24-Apr-2015

15:01

IA-64

Comctl32.dll

5.82.6002.19373

1,633,792

24-Apr-2015

15:21

IA-64

Comctl32.dll

5.82.6002.23681

1,633,792

24-Apr-2015

15:01

IA-64

Comctl32.dll

6.10.6002.19373

4,726,272

24-Apr-2015

15:21

IA-64

Comctl32.dll

6.10.6002.23681

4,726,272

24-Apr-2015

15:01

IA-64

Comctl32.dll

5.82.6002.19373

532,480

24-Apr-2015

15:54

x86

Comctl32.dll

5.82.6002.23681

532,480

24-Apr-2015

15:30

x86

Comctl32.dll

5.82.6002.19373

532,480

24-Apr-2015

15:54

x86

Comctl32.dll

5.82.6002.23681

532,480

24-Apr-2015

15:30

x86

Comctl32.dll

6.10.6002.19373

1,686,016

24-Apr-2015

15:54

x86

Comctl32.dll

6.10.6002.23681

1,686,016

24-Apr-2015

15:30

x86

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version

    Product

    Milestone

    Service branch

    6.1.7601.18xxx

    Windows 7 and Windows Server 2008 R2

    SP1

    GDR

    6.1.7601.22xxx

    Windows 7 and Windows Server 2008 R2

    SP1

    LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 7

File name

File version

File size

Date

Time

Platform

Comctl32.dll

5.82.7601.18837

530,432

24-Apr-2015

17:56

x86

Comctl32.dll

5.82.7601.23039

530,432

24-Apr-2015

18:00

x86

Comctl32.dll

5.82.7601.18837

530,432

24-Apr-2015

17:56

x86

Comctl32.dll

5.82.7601.23039

530,432

24-Apr-2015

18:00

x86

Comctl32.dll

6.10.7601.18837

1,680,896

24-Apr-2015

17:54

x86

Comctl32.dll

6.10.7601.23039

1,680,896

24-Apr-2015

17:57

x86

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File name

File version

File size

Date

Time

Platform

Comctl32.dll

5.82.7601.18837

633,856

24-Apr-2015

18:17

x64

Comctl32.dll

5.82.7601.23039

633,856

24-Apr-2015

18:23

x64

Comctl32.dll

5.82.7601.18837

633,856

24-Apr-2015

18:17

x64

Comctl32.dll

5.82.7601.23039

633,856

24-Apr-2015

18:23

x64

Comctl32.dll

6.10.7601.18837

2,030,592

24-Apr-2015

18:12

x64

Comctl32.dll

6.10.7601.23039

2,030,592

24-Apr-2015

18:15

x64

Comctl32.dll

5.82.7601.18837

530,432

24-Apr-2015

17:56

x86

Comctl32.dll

5.82.7601.23039

530,432

24-Apr-2015

18:00

x86

Comctl32.dll

5.82.7601.18837

530,432

24-Apr-2015

17:56

x86

Comctl32.dll

5.82.7601.23039

530,432

24-Apr-2015

18:00

x86

Comctl32.dll

6.10.7601.18837

1,680,896

24-Apr-2015

17:54

x86

Comctl32.dll

6.10.7601.23039

1,680,896

24-Apr-2015

17:57

x86

For all supported IA-64-based versions of Windows Server 2008 R2

File name

File version

File size

Date

Time

Platform

Comctl32.dll

5.82.7601.18837

1,627,136

24-Apr-2015

17:17

IA-64

Comctl32.dll

5.82.7601.23039

1,627,136

24-Apr-2015

17:18

IA-64

Comctl32.dll

5.82.7601.18837

1,627,136

24-Apr-2015

17:17

IA-64

Comctl32.dll

5.82.7601.23039

1,627,136

24-Apr-2015

17:18

IA-64

Comctl32.dll

6.10.7601.18837

4,763,136

24-Apr-2015

17:12

IA-64

Comctl32.dll

6.10.7601.23039

4,763,136

24-Apr-2015

17:14

IA-64

Comctl32.dll

5.82.7601.18837

530,432

24-Apr-2015

17:56

x86

Comctl32.dll

5.82.7601.23039

530,432

24-Apr-2015

18:00

x86

Comctl32.dll

5.82.7601.18837

530,432

24-Apr-2015

17:56

x86

Comctl32.dll

5.82.7601.23039

530,432

24-Apr-2015

18:00

x86

Comctl32.dll

6.10.7601.18837

1,680,896

24-Apr-2015

17:54

x86

Comctl32.dll

6.10.7601.23039

1,680,896

24-Apr-2015

17:57

x86

  • The files that apply to a specific product, milestone (RTM,SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version

    Product

    Milestone

    Service branch

    6.2.920 0.16 xxx

    Windows 8 and Windows Server 2012

    RTM

    GDR

    6.2.920 0.20 xxx

    Windows 8 and Windows Server 2012

    RTM

    LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8

File name

File version

File size

Date

Time

Platform

Comctl32.dll

5.82.9200.17359

541,696

25-Apr-2015

03:41

x86

Comctl32.dll

5.82.9200.21472

541,184

25-Apr-2015

03:05

x86

Comctl32.dll

5.82.9200.17359

541,696

25-Apr-2015

03:41

x86

Comctl32.dll

5.82.9200.21472

541,184

25-Apr-2015

03:05

x86

Comctl32.dll

6.10.9200.17359

2,050,048

25-Apr-2015

00:34

x86

Comctl32.dll

6.10.9200.21472

2,046,464

25-Apr-2015

00:25

x86

For all supported x64-based versions of Windows 8 and Windows Server 2012

File name

File version

File size

Date

Time

Platform

Comctl32.dll

5.82.9200.17359

652,288

24-Apr-2015

23:13

x64

Comctl32.dll

5.82.9200.21472

652,288

24-Apr-2015

23:35

x64

Comctl32.dll

5.82.9200.17359

652,288

24-Apr-2015

23:13

x64

Comctl32.dll

5.82.9200.21472

652,288

24-Apr-2015

23:35

x64

Comctl32.dll

6.10.9200.17359

2,516,992

24-Apr-2015

22:42

x64

Comctl32.dll

6.10.9200.21472

2,512,384

24-Apr-2015

22:18

x64

Comctl32.dll

5.82.9200.17359

541,696

25-Apr-2015

03:41

x86

Comctl32.dll

5.82.9200.21472

541,184

25-Apr-2015

03:05

x86

Comctl32.dll

5.82.9200.17359

541,696

25-Apr-2015

03:41

x86

Comctl32.dll

5.82.9200.21472

541,184

25-Apr-2015

03:05

x86

Comctl32.dll

6.10.9200.17359

2,050,048

25-Apr-2015

00:34

x86

Comctl32.dll

6.10.9200.21472

2,046,464

25-Apr-2015

00:25

x86

  • The files that apply to a specific product, milestone (RTM,SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version

    Product

    Milestone

    Service branch

    6.3.920 0.16 xxx

    Windows 8.1 and Windows Server 2012 R2

    RTM

    GDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8.1

File name

File version

File size

Date

Time

Platform

Comctl32.dll

5.82.9600.17810

549,888

25-Apr-2015

02:33

x86

Comctl32.dll

5.82.9600.17810

549,888

25-Apr-2015

02:33

x86

Comctl32.dll

6.10.9600.17810

2,105,856

25-Apr-2015

02:34

x86

For all supported x64-based versions of Windows 8.1 and Windows Server 2012 R2

File name

File version

File size

Date

Time

Platform

Comctl32.dll

5.82.9600.17810

653,824

25-Apr-2015

02:34

x64

Comctl32.dll

5.82.9600.17810

653,824

25-Apr-2015

02:34

x64

Comctl32.dll

6.10.9600.17810

2,582,528

25-Apr-2015

02:49

x64

Comctl32.dll

5.82.9600.17810

549,888

25-Apr-2015

02:33

x86

Comctl32.dll

5.82.9600.17810

549,888

25-Apr-2015

02:33

x86

Comctl32.dll

6.10.9600.17810

2,105,856

25-Apr-2015

02:34

x86

File name

SHA1 hash

SHA256 hash

Windows6.0-KB3059317-ia64.msu

3475094F9E8312A9F195903F899230A66EB101FD

ECF066EF0163A9066E2279800352DE40FFB567B771483FF6FB9DCBC4D4D3AE38

Windows6.0-KB3059317-x64.msu

7FF015670262DE15BBFCFBA1F4631C5E2D662CB3

1E1B039B85B123F71B6659E9A6F6A1C73051446FC20B306725B224A31BB64FAA

Windows6.0-KB3059317-x64.msu

7FF015670262DE15BBFCFBA1F4631C5E2D662CB3

1E1B039B85B123F71B6659E9A6F6A1C73051446FC20B306725B224A31BB64FAA

Windows6.0-KB3059317-x64.msu

7FF015670262DE15BBFCFBA1F4631C5E2D662CB3

1E1B039B85B123F71B6659E9A6F6A1C73051446FC20B306725B224A31BB64FAA

Windows6.0-KB3059317-x86.msu

A3F336EAE73F4A0CFD2B533C122936600A1C8BC3

CBD8549439B21E1C64A3F02BBB1D9CE494067D80F642357950F035A88142A4DD

Windows6.0-KB3059317-x86.msu

A3F336EAE73F4A0CFD2B533C122936600A1C8BC3

CBD8549439B21E1C64A3F02BBB1D9CE494067D80F642357950F035A88142A4DD

Windows6.0-KB3059317-x86.msu

A3F336EAE73F4A0CFD2B533C122936600A1C8BC3

CBD8549439B21E1C64A3F02BBB1D9CE494067D80F642357950F035A88142A4DD

Windows6.1-KB3059317-ia64.msu

B7D538385DD2B9C5E35AEA75403C999058734506

98EF90B664ECCB4A5904F821938FB594188CC2B1134B5A965B8C6ABD92A0B4AC

Windows6.1-KB3059317-x64.msu

B68DB33239BDDCB59E881252CFC7B79D58A2F26B

EDC0E9FA8752DE0326752A2F86D64155A11F88B2BF295B796103B9773C8016A3

Windows6.1-KB3059317-x64.msu

B68DB33239BDDCB59E881252CFC7B79D58A2F26B

EDC0E9FA8752DE0326752A2F86D64155A11F88B2BF295B796103B9773C8016A3

Windows6.1-KB3059317-x64.msu

B68DB33239BDDCB59E881252CFC7B79D58A2F26B

EDC0E9FA8752DE0326752A2F86D64155A11F88B2BF295B796103B9773C8016A3

Windows6.1-KB3059317-x86.msu

7DBAD42DD71389BB65948B81220FC019D77C8B77

D8058F4AF5F1E7E115BDE740562402B9694991D04FB26DA62E82FF3446631B1B

Windows8.1-KB3059317-arm.msu

B541778DE9D9B005F151464010CDC4E41BF8E02B

9BB834E454FCE51EDD0611543D2B7CC0AA5F11D6CA774C8EBBDDE09785548791

Windows8.1-KB3059317-x64.msu

4271D612EF3F3C57904458748FAAD85F0C56DAD0

C51453ADC985E2CF3FB8D4EFE66C09FA5E6CFEE49185B995E32996530B94C376

Windows8.1-KB3059317-x64.msu

4271D612EF3F3C57904458748FAAD85F0C56DAD0

C51453ADC985E2CF3FB8D4EFE66C09FA5E6CFEE49185B995E32996530B94C376

Windows8.1-KB3059317-x64.msu

4271D612EF3F3C57904458748FAAD85F0C56DAD0

C51453ADC985E2CF3FB8D4EFE66C09FA5E6CFEE49185B995E32996530B94C376

Windows8.1-KB3059317-x86.msu

CD13FF75515E4BA5664D4CDF8C961A26BC45DFC8

725D8AB475B8B97D23F7F6C733E935C7032427E7EB3022842FDBA534EC86EA69

Windows8-RT-KB3059317-arm.msu

E0F76B8D803E836252B1754E4F89D85E960295AF

8E8E44C7E6BC7FDBA4FCB661128C778255B3E7390736142C2F230C5F36575961

Windows8-RT-KB3059317-x64.msu

52A1DBABBC14312737BDD7414E61AECED02050CC

9B4808BC37E2B16B6936A3BE65C1BC8E2CD45D156CB8197EFA3C10F45AE382D3

Windows8-RT-KB3059317-x64.msu

52A1DBABBC14312737BDD7414E61AECED02050CC

9B4808BC37E2B16B6936A3BE65C1BC8E2CD45D156CB8197EFA3C10F45AE382D3

Windows8-RT-KB3059317-x64.msu

52A1DBABBC14312737BDD7414E61AECED02050CC

9B4808BC37E2B16B6936A3BE65C1BC8E2CD45D156CB8197EFA3C10F45AE382D3

Windows8-RT-KB3059317-x86.msu

D1C359CAE9FCD3EE717545ADFA47912F05F9B99B

89AD3A545C0DEC6520B8BA06B9F344FD2350B0D3306E9C897865B1E964230124

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.