MS16-004: Description of the security update for Microsoft Visual Basic Runtime 6.0: January 12, 2016

This security update resolves vulnerabilities in comctl32.ocx and mscomctl.ocx that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-004.

Note To apply this security update, you must have the release version of Visual Basic 6.0 IDE installed on the computer.

For a complete list of affected versions of Microsoft Office software, see KB3124585.
How to obtain and install the update

Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.
More information

Command-line switches for this update

For information about the various command-line switches that are supported by this update, see Standard Installer command-line options.

Removal information

You cannot remove this security update through the Add or Remove Programs item or the Programs and Features item in Control Panel. To remove this security update, save the .msi file to a known location, and then run the following command at a command prompt:
msiexec /x [knownlocation]\[PatchName].msi

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base article 3124585.

Security update replacement information

This security update replaces previously released update KB2708437.

File hash information

Package NamePackage Hash SHA 1Package Hash SHA 2

File information

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported x86-based versions of systems

File NameVersionDateTimeSizeCPU
Comctl32.cabNot applicable5-Nov-201517:33239,943Not applicable
Comctl32.depNot applicable5-Nov-201516:152,495Not applicable
Mscomctl.cabNot applicable5-Nov-201517:33481,594Not applicable
Mscomctl.depNot applicable5-Nov-201516:182,494Not applicable

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Article ID: 3096896 - Last Review: 01/12/2016 18:13:00 - Revision: 1.0

Microsoft Visual Basic 6.0 Professional Edition, Microsoft Visual Basic 6.0 Standard Edition

  • kbsurveynew kbexpertiseinter kbsecurity kbsecbulletin kbsecvulnerability kbbug kblist kbfix KB3096896