MS16-097: Description of the security update for Microsoft Graphics Component: August 9, 2016

Applies To
Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows RT 8.1 Windows Server 2012 Datacenter Windows Server 2012 Datacenter Windows Server 2012 Standard Windows Server 2012 Standard Windows Server 2012 Essentials Windows Server 2012 Foundation Windows Server 2012 Foundation Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows Server 2008 R2 Web Edition Windows Server 2008 R2 Foundation Windows 7 Service Pack 1 Windows 7 Ultimate Windows 7 Enterprise Windows 7 Professional Windows 7 Home Premium Windows 7 Home Basic Windows 7 Starter Windows Server 2008 Service Pack 2 Windows Server 2008 Datacenter Windows Server 2008 Enterprise Windows Server 2008 Standard Windows Server 2008 Web Edition Windows Server 2008 Foundation Windows Server 2008 for Itanium-Based Systems Windows Vista Service Pack 2 Windows Vista Ultimate Windows Vista Enterprise Windows Vista Business Windows Vista Home Premium Windows Vista Home Basic Windows Vista Starter

Summary

This security update resolves vulnerabilities in Windows that could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

To learn more about the vulnerability, see Microsoft Security Bulletin MS16-097.

More Information

Important

  • All future security and nonsecurity updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 require update 2919355 to be installed. We recommend that you install update 2919355 on your Windows RT 8.1-based, Windows 8.1-based, or Windows Server 2012 R2-based computer so that you receive future updates.
  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Note For Windows RT 8.1, this update is available through Windows Update only.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Click the download link in Microsoft Security Bulletin MS16-097 that corresponds to the version of Windows that you are running.

More Information

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

File Information

File hash information
File name SHA1 hash SHA256 hash
Windows6.1-KB3178034-x64.msu 3B1FBFD4B03DECA407DE34BFA622742F5E83CA71 27D74B5FC83EF015ECBC6E8F8336FF7391BBD8A1DAEC3A836C39C105BC795847
Windows8.1-KB3178034-x86.msu 36BDC6A2E5BCBEECD944632FB32B831C62EC3148 6E6966B1F509711F4484CDABE22352EC2B592E3F8B74EAD87A96F64DED8C301A
Windows8.1-KB3178034-x64.msu AAF17449E20C5378CB753997A69172F56EA8BD03 0C9AF95BC2A5983EB3EE6A42A0FFE47B515CB1AD76406E3300AA9E4377A72973
Windows8-RT-KB3178034-x64.msu EE97EE310F1426D88A6DA5F8AC2178C569D55D9D 81D890B5CA6AF2EEF29378C9EEFBEB76D06D0F271842155AE288832D76367485
Windows6.0-KB3178034-x64.msu 7814CE4C8E0BD970F5803A653C493FCFACAEBFCF 52E672D1BF937BABBE240C407AE1529887646F2D4CD60F9CA397E3E8583D6260
Windows6.1-KB3178034-x86.msu 4A3E0B0CA89B2C7C573D26C81BEB2F7B88F691E7 BE90C449F9C3A6F727C58627C04EEC1228C236771A18CD1570ADE1401C99E4AF
Windows6.0-KB3178034-x86.msu 759BB0EE53F9B080936F2136B278001CEE7A0F19 461260FF0C4507F66EB8BFB5D698F76BD9055BFCCE4A04441CD9FDAB16E1172B

      

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows 7 and Windows Server 2008 R2 file information

Notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.1.760 1.18xxx Windows 7 or Windows Server 2008 R2 SP1 GDR
    6.1.760 1.23xxx Windows 7 or Windows Server 2008 R2 SP1 LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x64-based versions

File name File version File size Date Time Platform
Gdiplus.dll 6.1.7601.23508 2,168,320 29-Jul-2016 15:31 x64
Gdiplus.dll 6.1.7601.23508 1,628,160 29-Jul-2016 15:15 x86

For all supported x86-based versions

File name File version File size Date Time Platform
Gdiplus.dll 6.1.7601.23508 1,628,160 29-Jul-2016 15:15 x86

Windows 8.1 and Windows Server 2012 R2 file information

Notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.3.960 0.16xxx Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 RTM GDR
    6.3.960 0.17xxx Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 RTM GDR
    6.3.960 0.18xxx Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 RTM GDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions

File name File version File size Date Time Platform
Gdiplus.dll 6.3.9600.18405 1,491,456 08-Jul-2016 14:25 x86
Gdiplus.dll 6.3.9600.18405 1,491,456 08-Jul-2016 14:25 x86
Gdiplus.dll 6.3.9600.18405 1,491,456 08-Jul-2016 14:25 x86

For all supported x64-based versions

File name File version File size Date Time Platform
Gdiplus.dll 6.3.9600.18405 1,753,600 08-Jul-2016 14:32 x64
Gdiplus.dll 6.3.9600.18405 1,753,600 08-Jul-2016 14:32 x64
Gdiplus.dll 6.3.9600.18405 1,753,600 08-Jul-2016 14:32 x64
Gdiplus.dll 6.3.9600.18405 1,491,456 08-Jul-2016 14:25 x86
Gdiplus.dll 6.3.9600.18405 1,491,456 08-Jul-2016 14:25 x86
Gdiplus.dll 6.3.9600.18405 1,491,456 08-Jul-2016 14:25 x86

Windows Server 2012 file information

Notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.2.920 0.17xxx Windows 8, Windows RT, or Windows Server 2012 RTM GDR
    6.2.920 0.21xxx Windows 8, Windows RT, or Windows Server 2012 RTM LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x64-based versions

File name File version File size Date Time Platform
Gdiplus.dll 6.2.9200.21926 1,690,624 09-Jul-2016 04:33 x64
Gdiplus.dll 6.2.9200.21926 1,690,624 09-Jul-2016 04:33 x64
Gdiplus.dll 6.2.9200.21926 1,690,624 09-Jul-2016 04:33 x64
Gdiplus.dll 6.2.9200.21926 1,437,696 09-Jul-2016 02:10 x86
Gdiplus.dll 6.2.9200.21926 1,437,696 09-Jul-2016 02:10 x86
Gdiplus.dll 6.2.9200.21926 1,437,696 09-Jul-2016 02:10 x86

Windows Vista and Windows Server 2008 file information

Notes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.0.600 2.19xxx Windows Vista or Windows Server 2008 SP2 GDR
    6.0.600 2.23xxx Windows Vista or Windows Server 2008 SP2 LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x64-based versions

File name File version File size Date Time Platform
Gdiplus.dll 5.2.6002.19672 2,194,944 28-Jul-2016 16:00 x64
Gdiplus.dll 5.2.6002.23998 2,195,456 28-Jul-2016 15:32 x64
Gdiplus.dll 6.0.6002.19672 2,426,880 28-Jul-2016 16:00 x64
Gdiplus.dll 6.0.6002.23998 2,426,880 28-Jul-2016 15:32 x64
Gdiplus.dll 5.2.6002.19672 1,748,992 28-Jul-2016 16:57 x86
Gdiplus.dll 5.2.6002.23998 1,753,088 28-Jul-2016 15:15 x86
Gdiplus.dll 6.0.6002.19672 1,841,152 28-Jul-2016 16:57 x86
Gdiplus.dll 6.0.6002.23998 1,841,152 28-Jul-2016 15:15 x86

For all supported x86-based versions

File name File version File size Date Time Platform
Gdiplus.dll 5.2.6002.19672 1,748,992 28-Jul-2016 16:57 x86
Gdiplus.dll 5.2.6002.23998 1,753,088 28-Jul-2016 15:15 x86
Gdiplus.dll 6.0.6002.19672 1,841,152 28-Jul-2016 16:57 x86
Gdiplus.dll 6.0.6002.23998 1,841,152 28-Jul-2016 15:15 x86