Microsoft security advisory: Improperly issued digital certificates could allow spoofing

INTRODUCTION

Microsoft has released a security advisory about this issue for IT professionals. This update is being released for all supported versions of Microsoft Windows.

The security advisory contains additional security-related information. To view the security advisory, go to the following Microsoft website:

http://technet.microsoft.com/security/advisory/3050995

More Information

In addition to addressing the certificates that are described in advisory 3050995, this update is cumulative and includes digital certificates that are described in the following previous advisories:

Prerequisites

In order to receive this update, you may have to have one or both of the following updates installed:

2677070 An automatic updater of revoked certificates is available for Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2

2813430 An update is available that enables administrators to update trusted and disallowed CTLs in disconnected environments in Windows
The following table summarizes the prerequisite updates.

Operating system

Update 2677070

Update 2813430

Windows Vista, Windows Server 2008

Yes

Yes

Windows 7, Windows Server 2008 R2

Yes

Yes

Windows 8, Windows Server 2012

No

Yes

Windows 8.1, Windows Server 2012 R2

No

No

Update for Windows 8, Windows 8.1, Windows Server 2012, and Windows Server 2012 R2

Because these systems are automatically protected, no action is needed.


Update for Windows Vista, Windows 7, Windows Server 2008, and Windows Server 2008 R2

Customers should install the automatic updater of revoked certificates. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

2813430 An update is available that enables administrators to update trusted and disallowed CTLs in disconnected environments in Windows

Update for Windows Server 2003 (KB3050995)

Download Download the package now.

Microsoft scanned this file for viruses by using the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to it.

How to download Microsoft support filesFor information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Any additional feedback? (Optional)

Thank you for your feedback!

×