Microsoft Edge Try Microsoft Edge A fast and secure browser that's designed for Windows 10 Get started

Skip to main content
Microsoft
Microsoft Support
  • Office
  • Windows
  • Surface
  • Xbox
  • Deals
  • Support
      • Windows apps
      • OneDrive
      • Outlook
      • Skype
      • OneNote
      • PCs & tablets
      • Accessories
      • VR & mixed reality
      • Microsoft HoloLens
      • Xbox games
      • PC games
      • Windows digital games
      • Movies & TV
      • Books
      • Microsoft Azure
      • Microsoft Dynamics 365
      • Microsoft 365
      • Cloud platform
      • Enterprise
      • Data platform
      • .NET
      • Visual Studio
      • Windows Dev Center
      • Docs
      • Microsoft Store
      • Free downloads & security
      • Education
      • Store locations
      • Gift cards
    • View all
    0
    Sign in
    Microsoft Support

    Description of the security update for Windows XP and Windows Server 2003: June 13, 2017

    Content provided by Microsoft

    Content provided by Microsoft

    Applies to: Windows XPMicrosoft Windows XP ProfessionalMicrosoft Windows XP Home EditionMicrosoft Windows Server 2003 Datacenter Edition (32-bit x86)Microsoft Windows Server 2003 Enterprise Edition (32-bit x86)Microsoft Windows Server 2003 Standard Edition (32-bit x86)Microsoft Windows Server 2003 Web EditionMicrosoft Windows Server 2003 R2 Enterprise Edition (32-Bit x86)Microsoft Windows Server 2003 R2 Enterprise x64 EditionMicrosoft Windows Server 2003 R2 Standard x64 Edition More


    Summary


    Windows olecnv32.dll remote code execution vulnerability

    A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code.

    To exploit the vulnerability, an attacker would have to convince a user to open either a specially crafted file or a program from either a webpage or an email message.

    The update addresses the vulnerability by correcting how Windows OLE validates user input.

    The following table contains links to the standard entry for each vulnerability in the Common Vulnerabilities and Exposures list:

    Vulnerability title

    CVE number

    Publicly disclosed

    Exploited

    Windows olecnv32.dll Remote Code Execution Vulnerability

    CVE-2017-8487

    Yes

    Yes

     

    Mitigating Factors

    Microsoft has not identified any mitigating factors for this vulnerability.

    Workarounds

    Microsoft has not identified any workarounds for this vulnerability.

    More Information


    Important
     
    • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

    How to obtain and install the update


    Method 1: Microsoft Update Catalog

    To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

    Method 2: Microsoft Download Center

    The following files are available for download from the Microsoft Download Center.



    For all x86-based versions of Windows Server 2003

    Download the package now



    For all x64-based versions of Windows Server 2003

    Download the package now



    For all x86-based versions of Windows XP

    Download the package now



    For all x64-based versions of Windows XP

    Download the package now



    For all versions of Windows XP Embedded

    Download the package now

    Release Date: June 13, 2017

    For more information about how to download Microsoft support files, click the following article number to go to the article in the Microsoft Knowledge Base:
    How to obtain Microsoft support files from online services



    Virus-scan claim

    Microsoft scanned this file for viruses by using the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to it.

    Deployment information


    For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
    Security update deployment information: June 13, 2017

    More Information


    How to obtain help and support for this security update
    Help for installing updates: Windows Update: FAQ

    Security solutions for IT professionals: TechNet Security Support and Troubleshooting

    Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

    Local support according to your country: International Support

    File Information


    File hash information
    File name SHA1 hash SHA256 hash
    WindowsServer2003-KB4025218-x64-custom-ENU.exe C58EA3F1A4E71FCF141A4D45A058AE6640F73C11 6F43F4407BFF6B54623F5CD47FB89098CC7EF0A889E49394CB2437A946BC95F2
    WindowsServer2003-KB4025218-x86-custom-ENU.exe 9405EE1A1EBBD332BA9E993C7A75A73414167B36 8C411D8C06D147B93A1BD420B57A532CF7B496E71B6353F51FE66AC26F341CF1


    File information

    The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

    For all supported x64-based versions
    File name File version File size Date Time Platform
    Olecnv32.dll 5.2.3790.6113 56,832 07-Jun-2017 09:29 x64 SP2
    Wolecnv32.dll 5.2.3790.6113 38,912 07-Jun-2017 09:29 x86 SP2
    Updspapi.dll 6.3.4.1 462,128 07-Jun-2017 09:31 x64

     

    For all supported x86-based versions
    File name File version File size Date Time Platform
    Olecnv32.dll 5.2.3790.6113 38,912 07-Jun-2017 19:26 x86
    Updspapi.dll 6.3.4.1 379,184 16-May-2014 03:14 x86

    Last Updated: Jun 13, 2017
    • Email
    • Print
    Thanks! Your feedback will help us improve the support experience.

    What's new

    • Surface Book 2
    • Surface Pro
    • Xbox One X
    • Xbox One S
    • VR & mixed reality
    • Windows 10 apps
    • Office apps

    Store & Support

    • Account profile
    • Download Center
    • Sales & support
    • Returns
    • Order tracking
    • Store locations
    • Support
    • Buy online, pick up in store

    Education

    • Microsoft in education
    • Office for students
    • Office 365 for schools
    • Deals for students & parents
    • Microsoft Azure in education

    Enterprise

    • Microsoft Azure
    • Enterprise
    • Data platform
    • Find a solutions provider
    • Microsoft partner resources
    • Microsoft AppSource
    • Manufacturing & resources
    • Financial services

    Developer

    • Microsoft Visual Studio
    • Windows Dev Center
    • Developer Network
    • TechNet
    • Microsoft Virtual Academy
    • Microsoft developer program
    • Channel 9
    • Office Dev Center

    Company

    • Careers
    • About Microsoft
    • Company news
    • Privacy at Microsoft
    • Investors
    • Diversity and inclusion
    • Accessibility
    • Security
    English (United States)
    • Terms of use
    • Privacy & cookies
    • Trademarks
    • © Microsoft 2018
    This site in other countries/regions
    Algérie - Français
    Argentina - Español
    Australia - English
    Belgique - Français
    België - Nederlands
    Bolivia - Español
    Bosna i Hercegovina - Hrvatski
    Brasil - Português
    Canada - English
    Canada - Français
    Chile - Español
    Colombia - Español
    Costa Rica - Español
    Crna Gora - Srpski
    Danmark - Dansk
    Deutschland - Deutsch
    Dominican Republic - Español
    Ecuador - Español
    Eesti - Eesti
    El Salvador - Español
    España - Español
    Estados Unidos - Español
    France - Français
    Guatemala - Español
    Hong Kong SAR - English
    Hrvatska - Hrvatski
    India - English
    Indonesia (Bahasa) - Bahasa
    Ireland - English
    Italia - Italiano
    Latvija - Latviešu
    Lietuva - Lietuvių
    Luxembourg - Français
    Magyarország - Magyar
    Malaysia - English
    Maroc - Français
    México - Español
    Nederland - Nederlands
    New Zealand - English
    Norge - Bokmål
    Panamá - Español
    Paraguay - Español
    Perú - Español
    Philippines - English
    Polska - Polski
    Portugal - Português
    Puerto Rico - Español
    România - Română
    Schweiz - Deutsch
    Singapore - English
    Slovenija - Slovenščina
    Slovensko - Slovenčina
    South Africa - English
    Srbija - Srpski
    Suisse - Français
    Suomi - Suomi
    Sverige - Svenska
    Tunisie - Français
    Türkiye - Türkçe
    United Kingdom - English
    United States - English
    Uruguay - Español
    Venezuela - Español
    Việt Nam - Tiếng việt
    Ísland - Íslenska
    Österreich - Deutsch
    Česká Republika - Čeština
    Ελλάδα - Ελληνικά
    България - Български
    Казахстан - Русский
    Россия - Русский
    Україна - Українська
    ישראל - עברית
    الإمارات العربية المتحدة - العربية
    المملكة العربية السعودية - العربية
    مصر - العربية
    भारत - हिंदी
    ไทย - ไทย
    中国 - 简体中文
    台灣 - 繁體中文
    日本 - 日本語
    香港特別行政區 - 繁體中文
    대한민국 - 한국어