MS16-004: Description of the security update for Microsoft Visual Basic Runtime 6.0: January 12, 2016

Summary
This security update resolves vulnerabilities in comctl32.ocx and mscomctl.ocx that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-004.

Note To apply this security update, you must have the release version of Visual Basic 6.0 IDE installed on the computer.

For a complete list of affected versions of Microsoft Office software, see KB3124585.
How to obtain and install the update

Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.
More information

Command-line switches for this update

For information about the various command-line switches that are supported by this update, see Standard Installer command-line options.

Removal information

You cannot remove this security update through the Add or Remove Programs item or the Programs and Features item in Control Panel. To remove this security update, save the .msi file to a known location, and then run the following command at a command prompt:
msiexec /x [knownlocation]\[PatchName].msi

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base article 3124585.

Security update replacement information

This security update replaces previously released update KB2708437.

File hash information

Package NamePackage Hash SHA 1Package Hash SHA 2
VB60SP6-KB3096896-x86-CHS.msi0C9E424A1AB7C62229C65EBE2469DAAE91CF1EFF2258279AC1E028709FB38091311CCF23B80F01D86BDE51EC26E1A587950E71BF
VB60SP6-KB3096896-x86-CHT.msiFA5223DDF27C25DCF0A45492E882FF8F34CD4562F2CD4418775FA4531ED532B96516FCB4BD98FE360B117C78430E2B2982BF6B70
VB60SP6-KB3096896-x86-DEU.msi5E8612E55CCFCD914874A9BEE72DE9909824CAF9485CAE47772ED7AA517A207BA469DE0868F85813815FF2016B7B11A382DAB7E0
VB60SP6-KB3096896-x86-ENU.msi613587D1F1BF20B745BC3FF987C66E60EDE1B57054D33446F95838DD1DF5A0F0666D36551978D5FD856264CBCDBCFC526742ACA7
VB60SP6-KB3096896-x86-ESN.msiEDE98C80C75AFE0B1C8B7996D4A5A5B0664A74F57070A6EABD989553BFE3656D59E956D01B5181457A1C6A66633C95152066136C
VB60SP6-KB3096896-x86-FRA.msi24127BEA46728EB9FE0B55CF3015A851FE1415C4D6694E1850EB5AE67925924D737CC6063CCF4F95A06105D734141ACB59EBBC23
VB60SP6-KB3096896-x86-ITA.msiE9BB9D2E5277AFE7451ED1238BBCDBA320B2A6979207240B569F1A0E2DA62161769A542178557FA9B3B4FD99D0749C8ED079A00C
VB60SP6-KB3096896-x86-JPN.msi596A7F1B6D3F32D92700248D8CECF536296B26FB84EE3723C19B73E80CFDA539A3EB75AA7697C18B8334DFE0B53C563FA0C71BA5
VB60SP6-KB3096896-x86-KOR.msi1B06BC318EFB9970111105D79337BBB6756F02FBBD4A7C3CE072B65E1B5D05C67E7291131ED26CECCD32D3406A256906CBC746AA

File information

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported x86-based versions of systems

File NameVersionDateTimeSizeCPU
Comctl32.cabNot applicable5-Nov-201517:33239,943Not applicable
Comctl32.depNot applicable5-Nov-201516:152,495Not applicable
Comctl32.ocx6.0.98.395-Nov-201517:30617,896x86
Mscomctl.cabNot applicable5-Nov-201517:33481,594Not applicable
Mscomctl.depNot applicable5-Nov-201516:182,494Not applicable
Mscomctl.ocx6.1.98.465-Nov-201517:301,070,232x86

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support
Properties

Article ID: 3096896 - Last Review: 01/12/2016 18:13:00 - Revision: 1.0

Microsoft Visual Basic 6.0 Professional Edition, Microsoft Visual Basic 6.0 Standard Edition

  • kbsurveynew kbexpertiseinter kbsecurity kbsecbulletin kbsecvulnerability kbbug kblist kbfix KB3096896
Feedback