Applies ToSQL Server 2014 Developer - duplicate (do not use) SQL Server 2014 Developer - duplicate (do not use) SQL Server 2014 Enterprise - duplicate (do not use) SQL Server 2014 Enterprise - duplicate (do not use) SQL Server 2014 Express - duplicate (do not use) SQL Server 2014 Express - duplicate (do not use) SQL Server 2014 Standard - duplicate (do not use) SQL Server 2014 Standard - duplicate (do not use) SQL Server 2014 Web - duplicate (do not use) SQL Server 2014 Web - duplicate (do not use)

Introduction

A security issue has been identified in Microsoft SQL Server 2014 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Summary

Microsoft has released security bulletin MS14-044. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft UpdateSecurity solutions for IT professionals: TechNet Security Support and TroubleshootingHelp protect your Windows-based computer from viruses and malware: Virus and Security Solution CenterLocal support according to your country: International Support

More Information

Known issues with this security update

  • If you install Cumulative Update 1 (CU1) or CU2 for SQL Server 2014 after you install this security update, the patch for Master Data Services will be removed, and Master Data Services will be vulnerable again. To correct that, you must reinstall the QFE package from this article (security update 2977315) or any cumulative update build whose version is later than 12.0.2381.0.

Removal information

To remove this software update for MDS, follow these steps:

  1. Back up the MDS database.

  2. Remove the MDS component.

  3. Reinstall the MDS component.

  4. Apply any necessary SQL Server service packs or service updates to bring MDS to its pre-security update version.

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

SQL Server 2014 Master Data Services

File name

File version

File size

Date

Time

Platform

Sql_mds_keyfile.dll

2014.120.2254.0

56984

25-Jul-2014

19:26

x64

Microsoft.MasterDataServices.WebUI.dll

12.0.2000.8

189632

20-Feb-2014

22:27

x86

SQL Server 2014 Database Services Common Core

File name

File version

File size

Date

Time

Platform

Sql_common_core_keyfile.dll

2014.120.2254.0

56984

26-Jul-2014

03:26

x64

SQL Server 2014 Database Services Core Instance

File name

File version

File size

Date

Time

Platform

Sql_engine_core_inst_keyfile.dll

2014.120.2254.0

56984

26-Jul-2014

03:26

x64

Sqlaccess.dll

2014.120.2254.0

469160

26-Jul-2014

03:25

x64

Sqlagent.exe

2014.120.2254.0

613032

26-Jul-2014

03:25

x64

Sqldk.dll

2014.120.2254.0

2397864

26-Jul-2014

03:18

x64

Sqllang.dll

2014.120.2254.0

35901608

26-Jul-2014

03:18

x64

Sqlmin.dll

2014.120.2254.0

64582304

26-Jul-2014

03:18

x64

Sqlos.dll

2014.120.2254.0

26792

26-Jul-2014

03:18

x64

Sqlservr.exe

2014.120.2254.0

370336

26-Jul-2014

03:25

x64

Sqltses.dll

2014.120.2254.0

8972968

26-Jul-2014

03:18

x64

SQL Server 2014 Integration Services

File name

File version

File size

Date

Time

Platform

Msdtssrvr.exe

12.0.2254.0

216736

26-Jul-2014

03:27

x64

Sql_is_keyfile.dll

2014.120.2254.0

56984

26-Jul-2014

03:26

x64

SQL Server 2014 Reporting Services

File name

File version

File size

Date

Time

Platform

Microsoft.reportingservices.diagnostics.dll.deploy

12.0.2254.0

1413280

26-Jul-2014

03:28

x86

Microsoft.reportingservices.diagnostics.dll

12.0.2254.0

1413280

26-Jul-2014

03:29

x86

Reportingservicesnativeclient.dll

2014.120.2254.0

105128

26-Jul-2014

03:24

x64

Reportingservicesnativeclient.dll

2014.120.2254.0

110248

26-Jul-2014

03:29

x86

Reportingservicesnativeserver.dll

2014.120.2254.0

100520

26-Jul-2014

03:25

x64

Sql_rs_keyfile.dll

2014.120.2254.0

56984

26-Jul-2014

03:26

x64

SQL Server 2014 Management Studio

File name

File version

File size

Date

Time

Platform

Microsoft.reportingservices.diagnostics.dll

12.0.2254.0

1413280

26-Jul-2014

03:28

x86

Microsoft.sqlserver.management.sqlstudio.dll

12.0.2254.0

317600

26-Jul-2014

03:29

x86

Reportingservicesnativeclient.dll

2014.120.2254.0

110248

26-Jul-2014

03:29

x86

Sql_ssms_keyfile.dll

2014.120.2254.0

56984

26-Jul-2014

03:26

x64

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.