An update that fixes a network vulnerability is available for Windows Embedded CE 6.0 R3

INTRODUCTION

This article describes an update for Windows Embedded CE 6.0 R3 that fixes a network vulnerability.

More Information

When you configure a Windows Embedded CE 6.0 R3-based device as a web server, some third-party network vulnerability scanner software will detect a "blind connection-reset attack" vulnerability.  

Software update information

A supported software update is now available from Microsoft. The update is called "Windows Embedded CE 6.0 Monthly Update November 2012."

In the "File information" section, the package file name contains the product version, date, Microsoft Knowledge Base (KB) article number, and processor type that each package applies to. The package file name uses the following format: Product version-yymmdd-kbnnnnnn-processor type. For example, "Wincepb60-110128-kb2492159-armv4i.msi" is the ARMV4i Windows Embedded CE 6.0 Platform Builder fix that is documented in KB article 2492159 and that is included in the January 2011 monthly update.

To resolve this problem immediately, download this Windows Embedded CE 6.0 monthly update from the following Microsoft website.

Microsoft Download Center

Windows Embedded CE 6.0

Prerequisites

This update is supported only if all previous updates for this product are installed.

Restart requirement

After you apply this update, you must perform a clean build of the whole platform. To do this, use one of the following methods:
  • On the Build menu, click Clean Solution, and then click Build Solution.
  • On the Build menu, click Rebuild Solution.
You do not have to restart the computer after you apply this software update.

Update replacement information

This update does not replace any other updates.

File information

The English version of this software update package has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.


Installer files


Files that are included in this update package

Status

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.

References

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates
Properties

Article ID: 2758636 - Last Review: Dec 11, 2012 - Revision: 1

Feedback