MS14-044: Description of the security update for SQL Server 2014 (GDR): August 12, 2014

Introduction

A security issue has been identified in Microsoft SQL Server 2014 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Summary

Microsoft has released security bulletin MS14-044. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Support and Troubleshooting

Help protect your Windows-based computer from viruses and malware: Virus and Security Solution Center

Local support according to your country:
International Support

More Information

Known issues with this security update

  • If you install Cumulative Update 1 (CU1) or CU2 for SQL Server 2014 after you install this security update, the patch for Master Data Services will be removed, and Master Data Services will be vulnerable again. To correct that, you must reinstall the QFE package from this article (security update 2977315) or any cumulative update build whose version is later than 12.0.2381.0.

Removal information

To remove this software update for MDS, follow these steps:

  1. Back up the MDS database.

  2. Remove the MDS component.

  3. Reinstall the MDS component.

  4. Apply any necessary SQL Server service packs or service updates to bring MDS to its pre-security update version.

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

SQL Server 2014 Master Data Services

File name

File version

File size

Date

Time

Platform

Sql_mds_keyfile.dll

2014.120.2254.0

56984

25-Jul-2014

19:26

x64

Microsoft.MasterDataServices.WebUI.dll

12.0.2000.8

189632

20-Feb-2014

22:27

x86

SQL Server 2014 Database Services Common Core

File name

File version

File size

Date

Time

Platform

Sql_common_core_keyfile.dll

2014.120.2254.0

56984

26-Jul-2014

03:26

x64

SQL Server 2014 Database Services Core Instance

File name

File version

File size

Date

Time

Platform

Sql_engine_core_inst_keyfile.dll

2014.120.2254.0

56984

26-Jul-2014

03:26

x64

Sqlaccess.dll

2014.120.2254.0

469160

26-Jul-2014

03:25

x64

Sqlagent.exe

2014.120.2254.0

613032

26-Jul-2014

03:25

x64

Sqldk.dll

2014.120.2254.0

2397864

26-Jul-2014

03:18

x64

Sqllang.dll

2014.120.2254.0

35901608

26-Jul-2014

03:18

x64

Sqlmin.dll

2014.120.2254.0

64582304

26-Jul-2014

03:18

x64

Sqlos.dll

2014.120.2254.0

26792

26-Jul-2014

03:18

x64

Sqlservr.exe

2014.120.2254.0

370336

26-Jul-2014

03:25

x64

Sqltses.dll

2014.120.2254.0

8972968

26-Jul-2014

03:18

x64

SQL Server 2014 Integration Services

File name

File version

File size

Date

Time

Platform

Msdtssrvr.exe

12.0.2254.0

216736

26-Jul-2014

03:27

x64

Sql_is_keyfile.dll

2014.120.2254.0

56984

26-Jul-2014

03:26

x64

SQL Server 2014 Reporting Services

File name

File version

File size

Date

Time

Platform

Microsoft.reportingservices.diagnostics.dll.deploy

12.0.2254.0

1413280

26-Jul-2014

03:28

x86

Microsoft.reportingservices.diagnostics.dll

12.0.2254.0

1413280

26-Jul-2014

03:29

x86

Reportingservicesnativeclient.dll

2014.120.2254.0

105128

26-Jul-2014

03:24

x64

Reportingservicesnativeclient.dll

2014.120.2254.0

110248

26-Jul-2014

03:29

x86

Reportingservicesnativeserver.dll

2014.120.2254.0

100520

26-Jul-2014

03:25

x64

Sql_rs_keyfile.dll

2014.120.2254.0

56984

26-Jul-2014

03:26

x64

SQL Server 2014 Management Studio

File name

File version

File size

Date

Time

Platform

Microsoft.reportingservices.diagnostics.dll

12.0.2254.0

1413280

26-Jul-2014

03:28

x86

Microsoft.sqlserver.management.sqlstudio.dll

12.0.2254.0

317600

26-Jul-2014

03:29

x86

Reportingservicesnativeclient.dll

2014.120.2254.0

110248

26-Jul-2014

03:29

x86

Sql_ssms_keyfile.dll

2014.120.2254.0

56984

26-Jul-2014

03:26

x64


Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×