MS16-033: Description of the security update for Windows USB mass storage class driver: March 8, 2016

Summary
This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker with physical access inserts a specially crafted USB device into the system.

To learn more about the vulnerability, see Microsoft Security Bulletin MS16-033.
More information
Important
  • All future security and non-security updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 require update 2919355 to be installed. We recommend that you install update 2919355 on your Windows RT 8.1-based, Windows 8.1-based, or Windows Server 2012 R2-based computer so that you receive future updates.
  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.
How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Note For Windows RT 8.1, this update is available through Windows Update only.

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Click the download link in Microsoft Security Bulletin MS16-033 that corresponds to the version of Windows that you are running.
More information

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support
File Information

File hash information

File nameSHA1 hashSHA256 hash
Windows6.1-KB3139398-ia64.msu111DF811477B2ABD5035B91F95FD88700197D54E15342D175D50115AD77609176595222DF254F25A24FF46805C453E2576DF323C
Windows6.1-KB3139398-x64.msu4A5707DFAD03116B078BC99DE404E89A9D93C8012F93049621C79E313E22CF44E674FB27A0456492FA044547E96E8A2B0B669FD4
Windows6.1-KB3139398-x86.msu3413EF7A8FB60C9F7561838AF5A505DD5FD9FCF17F35421E89D28A681A5084C745946B84A12F18E77F724855C0349570897CEB4D
Windows6.0-KB3139398-x86.msuAE7DD783EBA4BE7029DBEEB60958B2B394A3CCB8A6A8B9B004EE240D69245B55230E532BA25FF4D5317B4FE482072445256C986F
Windows6.0-KB3139398-ia64.msu5CC24A4D9F2840A90FFF64A5B833195EF797009DE6C11D03E5336D03E8857730DCEB6C296EDEFBF51B7302F64D09CE7573A90672
Windows6.0-KB3139398-x64.msu0BEE27EE3B8F130CE31D292BA706461236DBEC042087476A4D5BB67C0AF4FE5F7C213DBCBA8602AA6D4506A4B0AD9622E3EB88DE
Windows8.1-KB3139398-x64.msuDA8A470A7629685A4C67EEC13E1509C338ACBD243E3A4823E410A875154AE60018AAEF7E3C603D69EFAA01A23715442441777888
Windows8.1-KB3139398-x86.msu8B0AB20EA83FA8F18C431664A0E497F853DC406B5D0A2225D3C2B1634DD50830EB808E4A6B3572EA57D4094DA72B955C82B40525
Windows8-RT-KB3139398-x64.msu1A6536F3E1DCA09DDD4AD146A863818BE148E65BD6EC25F5F097C2F974429276F55863AC7D6B3B8B51561398A1E8F0E8DC1F7150

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows 7 and Windows Server 2008 R2 file information

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Version Product Milestone Service branch
    6.1.760 1.18xxxWindows 7 or Windows Server 2008 R2 SP1GDR
    6.1.760 1.23 xxxWindows 7 or Windows Server 2008 R2 SP1 LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
For all supported ia64-based versions
File nameFile versionFile sizeDateTimePlatform
Usbstor.sys6.1.7601.19144239,61603-Feb-201617:30IA-64
Usbstor.sys6.1.7601.23344239,61603-Feb-201617:27IA-64
For all supported x64-based versions
File nameFile versionFile sizeDateTimePlatform
Usbstor.sys6.1.7601.1914495,74403-Feb-201618:07x64
Usbstor.sys6.1.7601.2334495,74403-Feb-201618:20x64
Usbstor.sys6.1.7601.1914491,64803-Feb-201618:07x64
Usbstor.sys6.1.7601.2334491,64803-Feb-201618:19x64
For all supported x86-based versions
File nameFile versionFile sizeDateTimePlatform
Usbstor.sys6.1.7601.1914480,38403-Feb-201618:00x86
Usbstor.sys6.1.7601.2334480,38403-Feb-201618:01x86
Usbstor.sys6.1.7601.1914476,28803-Feb-201617:59x86
Usbstor.sys6.1.7601.2334476,28803-Feb-201618:00x86

Windows Vista and Windows Server 2008 file information

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Version Product Milestone Service branch
    6.0.600 2.19xxxWindows Vista or Windows Server 2008SP2GDR
    6.0.600 2.23xxxWindows Vista or Windows Server 2008SP2LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
For all supported x86-based versions
File nameFile versionFile sizeDateTimePlatform
Usbstor.sys6.0.6002.1959571,68002-Feb-201615:30x86
Usbstor.sys6.0.6002.2390671,68002-Feb-201615:24x86
For all supported ia64-based versions
File nameFile versionFile sizeDateTimePlatform
Usbstor.sys6.0.6002.19595226,30402-Feb-201615:35IA-64
Usbstor.sys6.0.6002.23906226,30402-Feb-201615:32IA-64
For all supported x64-based versions
File nameFile versionFile sizeDateTimePlatform
Usbstor.sys6.0.6002.1959586,01602-Feb-201615:44x64
Usbstor.sys6.0.6002.2390686,01602-Feb-201615:56x64

Windows 8.1 and Windows Server 2012 R2 file information

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.3.960 0.17 xxxWindows RT 8.1, Windows 8.1, and Windows Server 2012 R2RTMGDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
For all supported x64-based versions
File nameFile versionFile sizeDateTimePlatform
Tsusbhub.sys6.3.9600.18224111,10431-Jan-201618:08x64
Usbstor.sys6.3.9600.18224148,83231-Jan-201619:16x64
For all supported x86-based versions
File nameFile versionFile sizeDateTimePlatform
Tsusbhub.sys6.3.9600.1822490,62431-Jan-201617:32x86
Usbstor.sys6.3.9600.18224120,67231-Jan-201618:37x86

Windows Server 2012 file information

Notes
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Version Product Milestone Service branch
    6.2.920 0.17xxxWindows Server 2012RTMGDR
    6.2.920 0.21xxxWindows Server 2012RTMLDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
For all supported x64-based versions
File nameFile versionFile sizeDateTimePlatform
Tsusbhub.sys6.2.9200.17642115,71228-Jan-201619:54x64
Tsusbhub.sys6.2.9200.21761115,71228-Jan-201619:33x64
Usbstor.sys6.2.9200.17642119,12830-Jan-201620:49x64
Usbstor.sys6.2.9200.21761119,12830-Jan-201617:27x64
malicious attacker exploit
Properties

Article ID: 3139398 - Last Review: 03/08/2016 18:44:00 - Revision: 1.0

Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard, Windows Server 2012 R2 Essentials, Windows Server 2012 R2 Foundation, Windows 8.1 Enterprise, Windows 8.1 Pro, Windows 8.1, Windows RT 8.1, Windows Server 2012 Datacenter, Windows Server 2012 Standard, Windows Server 2012 Essentials, Windows Server 2012 Foundation, Windows Server 2008 R2 Service Pack 1, Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows Vista Service Pack 2

  • atdownload kbbug kbexpertiseinter kbfix kbsecbulletin kbsecurity kbsecvulnerability KB3139398
Feedback