You are currently offline, waiting for your internet to reconnect

MS15-029: Vulnerability in Windows Photo Decoder component could allow information disclosure: March 10, 2015

Summary
This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if a user browses to a website that contains a specially crafted JPEG XR (.JXR) image. This vulnerability would not allow an attacker to execute code or to elevate his or her user rights directly. But this vulnerability could be used to obtain information that could be used to try to further compromise the affected system. 
Introduction
Microsoft has released security bulletin MS15-029. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates:Support for Microsoft Update

Security solutions for IT professionals:TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware:Virus Solution and Security Center

Local support according to your country:International Support

More information

Security update deployment information

Windows Vista (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file namesFor all supported 32-bit editions of Windows Vista:
Windows6.0-KB3035126-x86.msu

For all supported x64-based editions of Windows Vista:
Windows6.0-KB3035126-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart.
Removal informationWUSA.exe does not support the uninstall of updates. To uninstall an update that is installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.

Windows Server 2008 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file namesFor all supported 32-bit editions of Windows Server 2008:
Windows6.0-KB3035126-x86.msu

For all supported x64-based editions of Windows Server 2008:
Windows6.0-KB3035126-x64.msu

For all supported Itanium-based editions of Windows Server 2008:
Windows6.0-KB3035126-ia64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart.
Removal informationWUSA.exe does not support the uninstall of updates. To uninstall an update that is installed by WUSA, click Control Panel, and then click Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.

Windows 7 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file nameFor all supported 32-bit editions of Windows 7:
Windows6.1-KB3035126-x86.msu

For all supported x64-based editions of Windows 7:
Windows6.1-KB3035126-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart.
Removal informationTo uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, click System and Security, and under Windows Update, click View installed updates, and then select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.

Windows Server 2008 R2 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file nameFor all supported x64-based editions of Windows Server 2008 R2:
Windows6.1-KB3035126-x64.msu

For all supported Itanium-based editions of Windows Server 2008 R2:
Windows6.1-KB3035126-ia64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart.
Removal informationTo uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, click System and Security, and under Windows Update, click View installed updates, and then select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.

Windows 8 and Windows 8.1 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file nameFor all supported 32-bit editions of Windows 8:
Windows8-RT-KB3035126-x86.msu

For all supported x64-based editions of Windows 8:
Windows8-RT-KB3035126-x64.msu

For all supported 32-bit editions of Windows 8.1:
Windows8.1-KB3035126-x86.msu

For all supported x64-based editions of Windows 8.1:
Windows8.1-KB3035126-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart.
Removal informationTo uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, click System and Security, click Windows Update, and under See also, click Installed updates, and then select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.

Windows Server 2012 and Windows Server 2012 R2 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file nameFor all supported editions of Windows Server 2012:
Windows8-RT-KB3035126-x64.msu

For all supported editions of Windows Server 2012 R2:
Windows8.1-KB3035126-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart.
Removal informationTo uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, click System and Security, click Windows Update, and under See also, click Installed updates, and then select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.

Windows RT and Windows RT 8.1 (all editions)

Reference Table

The following table contains the security update information for this software.
DeploymentThese updates are available via Windows Update only.
Restart RequirementYes, you must restart your system after you apply this security update.
Removal InformationClick Control Panel, click System and Security, click Windows Update, and under See also, click Installed updates, and then select from the list of updates.
File InformationSee the file information section.
File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows Vista and Windows Server 2008 file information

  • The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.0.6002.18xxxWindows Vista SP2 and Windows Server 2008 SP2SP2GDR
    6.0.6002.23xxxWindows Vista SP2 and Windows Server 2008 SP2SP2LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows Vista and Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Wmphoto.dll7.0.6002.19299369,66429-Jan-201502:06x86
Wmphoto.dll7.0.6002.23609369,66429-Jan-201501:35x86

For all supported x64-based versions of Windows Vista and Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Wmphoto.dll7.0.6002.19299449,02429-Jan-201501:42x64
Wmphoto.dll7.0.6002.23609449,02429-Jan-201501:33x64
Wmphoto.dll7.0.6002.19299369,66429-Jan-201502:06x86
Wmphoto.dll7.0.6002.23609369,66429-Jan-201501:35x86

For all supported IA-64-based versions of Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Wmphoto.dll7.0.6002.19299793,60029-Jan-201501:25IA-64
Wmphoto.dll7.0.6002.23609793,60029-Jan-201501:05IA-64
Wmphoto.dll7.0.6002.19299369,66429-Jan-201502:06x86
Wmphoto.dll7.0.6002.23609369,66429-Jan-201501:35x86

Windows 7 and Windows Server 2008 R2 file information

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.1.7601.18xxxWindows 7 and Windows Server 2008 R2SP1GDR
    6.1.7601.22xxxWindows 7 and Windows Server 2008 R2SP1LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 7

File nameFile versionFile sizeDateTimePlatform
Wmphoto.dll6.1.7601.18742318,46404-Feb-201502:54x86
Wmphoto.dll6.1.7601.22949318,46404-Feb-201503:24x86
Wmphoto.dll6.2.9200.17254417,79204-Feb-201502:54x86
Wmphoto.dll6.2.9200.21371417,79204-Feb-201503:23x86

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File nameFile versionFile sizeDateTimePlatform
Wmphoto.dll6.1.7601.18742392,19204-Feb-201503:16x64
Wmphoto.dll6.1.7601.22949392,19204-Feb-201503:46x64
Wmphoto.dll6.2.9200.17254465,92004-Feb-201503:16x64
Wmphoto.dll6.2.9200.21371465,92004-Feb-201503:46x64
Wmphoto.dll6.1.7601.18742318,46404-Feb-201502:54x86
Wmphoto.dll6.1.7601.22949318,46404-Feb-201503:24x86
Wmphoto.dll6.2.9200.17254417,79204-Feb-201502:54x86
Wmphoto.dll6.2.9200.21371417,79204-Feb-201503:23x86

For all supported IA-64-based versions of Windows Server 2008 R2

File nameFile versionFile sizeDateTimePlatform
Wmphoto.dll6.1.7601.18742792,57604-Feb-201502:36IA-64
Wmphoto.dll6.1.7601.22949792,57604-Feb-201502:40IA-64
Wmphoto.dll6.1.7601.18742318,46404-Feb-201502:54x86
Wmphoto.dll6.1.7601.22949318,46404-Feb-201503:24x86

Windows 8 and Windows Server 2012 file information

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.2.920 0.16 xxxWindows 8 and Windows Server 2012RTMGDR
    6.2.920 0.20 xxxWindows 8 and Windows Server 2012RTMLDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8

File nameFile versionFile sizeDateTimePlatform
Wmphoto.dll6.2.9200.17247368,64024-Jan-201505:00x86
Wmphoto.dll6.2.9200.21364368,64024-Jan-201504:46x86

For all supported x64-based versions of Windows 8 and Windows Server 2012

File nameFile versionFile sizeDateTimePlatform
Wmphoto.dll6.2.9200.17247420,86424-Jan-201506:43x64
Wmphoto.dll6.2.9200.21364420,86424-Jan-201505:40x64
Wmphoto.dll6.2.9200.17247368,64024-Jan-201505:00x86
Wmphoto.dll6.2.9200.21364368,64024-Jan-201504:46x86

Windows 8.1 and Windows Server 2012 R2 file information

For all supported x86-based versions of Windows 8.1

File nameFile versionFile sizeDateTimePlatform
Wmphoto.dll6.3.9600.17668357,37628-Jan-201501:11x86

For all supported x64-based versions of Windows 8.1 and Windows Server 2012 R2

File nameFile versionFile sizeDateTimePlatform
Wmphoto.dll6.3.9600.17668402,43228-Jan-201501:31x64
Wmphoto.dll6.3.9600.17668357,37628-Jan-201501:11x86

File hash information

File nameSHA1 hashSHA256 hash
Windows6.0-KB3035126-ia64.msuB519D6827D275E387BCE922486266E542F8E0DCD5E87E0E824E2D714ACC37E2B9EC8E5B699C493F4AD98EAB8F2D1C01D0936A09B
Windows6.0-KB3035126-x64.msuD579AB02F12C73FC75586A53B014B37706A5CC9BCD5FD37AEFBD0A878D59F69C9D78A07FD9710A688FF23148AF3F6AFF68C761DD
Windows6.0-KB3035126-x86.msuD82C89C73FE46B2DA47D3A7D8A74F736DA68CC59F59AC48116EA9414656B6672BD772AA8CDEE80077E36A95822697CE5547DBC15
Windows6.1-KB3035126-ia64.msu44BCB6E8DD0CB2642F3BCCEC980F809AB51A66EEA5CA33DB0B1AA1E05B8377C426B6915DACE314E45B52F755E13CE449E8C4E18D
Windows6.1-KB3035126-ia64.msu7D20A2BBFB997076EA4B2619D90BE0D3E72EDB1DF222D112D895C04086CD81942BBBA774D775E7B5D193B2EE26E9A0427711AA8B
Windows6.1-KB3035126-ia64.msu9C34E7EE499E35F5D275D67A603EC8648FE7CC30703FFB5A7FA06AE15B0508530FB5F4F18ED5F77ABD7E961EFF95BBBEE28F2D00
Windows6.1-KB3035126-x64.msuBA6BF5118BC60BE7F824C4DBA9131185E47556468AB8506D38F13FBFCFA75AA7643B493CC15806B8FB985F5378C9E16E548F230E
Windows6.1-KB3035126-x64.msuC5388718E43DC346A6C4E53E5F7E4DFF446DD40C86401F61D2E6104DE754C1E2C0752D6DFD83E44129AE12BD4105C613CACE13DF
Windows6.1-KB3035126-x64.msuD2CE39B7B278B6464DF9E99BD9F2935ED1712B669639137C23A70A28B2E6B313B0EFEBDDB930F6C273BDE12B7EFD1BDE137D514A
Windows6.1-KB3035126-x86.msu65E46B3D10323CEE458B2ED8906B4395A3407E55E5B195F452E8BDB675E0C4E517A7D8CCA9DF2712A8BA54C87C464C0346EB5C21
Windows6.1-KB3035126-x86.msuAE7082853EFE58AF790022E7279D1A96A810BD732AF9063F4E8700FC5858E48DB68B3456E9238BA532312EC2525EED9158C08384
Windows6.1-KB3035126-x86.msuC357B359ED20306FB2A1E5182976C3786898732A129FD85801179509C66422B4A4423D7CEEC660B820B18A54F2DEE16ADDC3B720
Windows8.1-KB3035126-x64.msu6D9F28B676B7EE992BDD35C0297F8F95576C360FAA2D3C4E01272D005E4219B6CBDB08C1FBF60466A7A2C4FA9EF3B984E44DA45D
Windows8.1-KB3035126-x86.msuBB2255216C32C2BCEE7DB96B6A2CAD44C848A088A78B46924716652A1D4CBEDEEC0A9D63C1207C703766528BE59E9B36DFD32748
Windows8-RT-KB3035126-x64.msu5D6A620C7DEC64494A5CA180612B8EA5693956E36BF69E4E8B13040DDAA75B97B88774327FEF51584FF558D9DCCBF3E441E14E53
Windows8-RT-KB3035126-x86.msuB765EA52630296CA1426CFEF32FEF99F86EB4F4ECD23ED0F4A2051C0D1619A1515FF92C54C5F2AE0E0D65F55E31755106FEE5A3F
update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE
Properties

Article ID: 3035126 - Last Review: 03/10/2015 19:50:00 - Revision: 2.0

Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard, Windows Server 2012 R2 Essentials, Windows Server 2012 R2 Foundation, Windows 8.1 Enterprise, Windows 8.1 Pro, Windows 8.1, Windows RT 8.1, Windows Server 2012 Datacenter, Windows Server 2012 Standard, Windows Server 2012 Essentials, Windows Server 2012 Foundation, Windows 8 Enterprise, Windows 8 Pro, Windows 8, Windows RT, Windows Server 2008 R2 Service Pack 1, Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows Vista Service Pack 2

  • atdownload kbbug kbExpertiseInter kbfix KbSECBulletin kbsecurity kbsecvulnerability KB3035126
Feedback
ms.dqp0';m.content='true';document.getElementsByTagName('head')[0].appendChild(m);" onload="var m=document.createElement('meta');m.name='ms.dqp0';m.content='false';document.getElementsByTagName('head')[0].appendChild(m);" src="http://c1.microsoft.com/c.gif?"> !-- end ngRepeat: language in languagesListForLargeScreens track by $index -->
Norge - Bokmål
United States (English)
香港特別行政區 - 繁體中文
El Salvador - Español
Panamá - Español
Uruguay - Español
대한민국 - 한국어
España - Español
Paraguay - Español
Venezuela - Español
://c1.microsoft.com/c.gif?DI=4050&did=1&t=">var varClickTracking = 1; var varCustomerTracking = 1; var Route = "76500"; var Ctrl = ""; document.write(" oad="var m=document.createElement('meta');m.name='ms.dqp0';m.content='false';document.getElementsByTagName('head')[0].appendChild(m);" src="http://c1.microsoft.com/c.gif?"> >