MS14-044: Description of the security update for SQL Server 2012 Service Pack 1 (GDR): August 12, 2014

Introduction

A security issue has been identified in Microsoft SQL Server 2012 Service Pack 1 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Summary

Microsoft has released security bulletin MS14-044. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Support and Troubleshooting

Help protect your Windows-based computer from viruses and malware: Virus and Security Solution Center

Local support according to your country:
International Support

More Information

Known issues with this security update

  • In certain scenarios, SQL Server 2012 customers who are using Microsoft SQL Server Master Data Service (MDS) may be unable to obtain updates from Microsoft Updates. To work around this problem, SQL Server 2012 MDS customers can manually search for, download, and install the latest Microsoft SQL bulletin packages from Microsoft Download Center. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
    2969894 Cannot obtain updates from Microsoft Updates in a server that has SQL Server 2012 MDS installed
  • After you install this security update, SQL Server is updated to version 11.0.3153.0. If you have the Analysis Services and Tools components installed, these components are updated to version 11.0.3130.0. This version number is associated with update 2793634. This is true even though update 2793634 is listed as version 11.0.3128.0. All SQL Server servicing releases between baselines (for example, RTM baselines, service packs, and so on) are cumulative.

Removal information

ScenarioHow to remove the security update
The SQL Server engine is installed without SQL Server Master Data Services (MDS) on the same computer.You can remove this software update by using the Add or Remove Programs item in Control Panel. You do not have to remove the SQL Server engine.
The SQL Server engine is installed together with MDS on the same computer.
  • You can remove this software update for the SQL Server engine by using the Add or Remove Programs item in Control Panel. You do not have to remove the SQL Server engine.
  • To remove this software update for MDS, follow these steps:
    1. Back up the MDS database.
    2. Remove the MDS component.
    3. Reinstall the MDS component.
    4. Apply any necessary SQL Server service packs or service updates to bring MDS to its pre-security update version.
MDS is installed on a computer that does not have the SQL Server engine installed.
  1. Back up the MDS database.
  2. Remove the MDS component.
  3. Reinstall the MDS component.
  4. Apply any necessary SQL Server service packs or service updates to bring MDS to its pre-security update version.

FILE INFORMATION

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
x86-based versions
x64-based versions
Properties

Article ID: 2977326 - Last Review: Aug 22, 2014 - Revision: 1

Microsoft SQL Server 2012 Service Pack 1, Microsoft SQL Server 2012 Developer, Microsoft SQL Server 2012 Enterprise, Microsoft SQL Server 2012 Express, Microsoft SQL Server 2012 Standard, Microsoft SQL Server 2012 Web

Feedback