MS16-120: Description of the security update for the .NET Framework 4.5.2 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016


View products that this article applies to.

Summary

This update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document. This update addresses the vulnerabilities by correcting how the Windows font library handles embedded fonts. To learn more about this vulnerability, see Microsoft Security Bulletin MS16-120.

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

  • This security update requires the Windows dwrite.dll component. Up-to-date Windows Vista SP2 and Windows Server 2008 SP2 systems are expected to have this component installed. If dwrite.dll is not present on a system, it can be downloaded here. Windows Update, WSUS, and Microsoft Update Catalog customers will receive the Windows dwrite.dll component through the 3078601 update as an automatic co-installation, just in case it’s not already present.

Additional information about this security update

For more information about this security update as it relates to Windows Vista and Windows Server 2008, see the following article in the Microsoft Knowledge Base:

3188736 MS16-120: Description of the Security and Quality Rollup .NET Framework 3.0 Service Pack 2, 4.5.2, and 4.6 updates for Windows Vista Service Pack 2: October 11, 2016

How to obtain and install this update

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

On the WSUS server, follow these steps:

  1. Click Start, click Administrative Tools, and then click Microsoft Windows Server Update Services 3.0.

  2. Expand ComputerName, and then click Action.

  3. Click Import Updates.

  4. If WSUS opens a browser window in which you are prompted to install an ActiveX control, install the control to continue.

    Note After the ActiveX control is installed, the Microsoft Update Catalog screen opens.

  5. Enter some search criteria in the Search box, and then click Search.

  6. Locate the .NET Framework packages that match the operating systems, languages, and processors in your environment. Click Add to add them to your basket.

  7. When you have selected all the packages that you require, click View Basket.

  8. Click Import to import the packages into your WSUS server.

  9. After the packages have been imported, click Close to return to WSUS.


The updates are now available for installation through WSUS.

Update deployment informationFor deployment information about this update, see Microsoft Knowledge Base Article 3192884.

Update removal informationNote We do not recommend that you remove any security update.

To remove this update, use the Programs and Features item in Control Panel.

Update restart informationThis update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement informationThis update replaces previously released update 3099869.

File hash

File name

SHA1 hash

SHA256 hash

NDP45-KB3189039-x86.exe

B6B26F28DEC65CC3B7040172D454D5B292A69CE1

8E1B3551AECB6F7F9586F9A486CC3BA95E776C55892846BBC42614864BE967C9

NDP45-KB3189039-x64.exe

B968E2D55E5482D48F18338F2756DA2786A44829

6D10BF8C5940F05D8C7121EAD311DACE7B96AE1FEF065AC2537D78E8FA5388AB

File attributes

The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

For all supported x86-based versions of systems

File name

File version

File size

Date

Time

PenIMC.dll

4.0.30319.36367

81,048

26-Aug-2016

09:24

PresentationCore.dll

4.0.30319.36367

3,226,304

26-Aug-2016

08:34

PresentationFramework.dll

4.0.30319.36367

6,220,496

26-Aug-2016

08:34

PresentationHost_v0400.dll

4.0.30319.36367

186,080

26-Aug-2016

09:24

PresentationHost_v0400.dll.mui

4.0.30319.36367

84,872

26-Aug-2016

08:34

PresentationNative_v0400.dll

4.0.30319.36367

790,240

26-Aug-2016

09:24

System.Core.dll

4.0.30319.36367

1,263,280

26-Aug-2016

08:34

System.Windows.Controls.Ribbon.dll

4.0.30319.36367

751,352

26-Aug-2016

08:34

System.Xaml.dll

4.0.30319.36367

631,976

26-Aug-2016

08:34

WindowsBase.dll

4.0.30319.36367

1,238,704

26-Aug-2016

08:34

WPFFontCache_v0400.exe.mui

4.0.30319.36367

19,320

26-Aug-2016

08:34

WPFFontCache_v0400.exe

4.0.30319.36367

24,776

26-Aug-2016

09:24

wpfgfx_v0400.dll

4.0.30319.36367

1,648,304

26-Aug-2016

09:24

VsVersion.dll

12.0.52367.36367

18,088

26-Aug-2016

09:24

msvcp120_clr0400.dll

12.0.52367.36367

536,776

26-Aug-2016

09:24

msvcr120_clr0400.dll

12.0.52367.36367

875,712

26-Aug-2016

09:24

For all supported x64-based versions of systems

File name

File version

File size

Date

Time

PenIMC.dll

4.0.30319.36367

94,360

26-Aug-2016

09:41

PenIMC.dll

4.0.30319.36367

81,048

26-Aug-2016

09:24

PresentationCore.dll

4.0.30319.36367

3,210,952

26-Aug-2016

09:41

PresentationCore.dll

4.0.30319.36367

3,226,304

26-Aug-2016

08:34

PresentationFramework.dll

4.0.30319.36367

6,220,496

26-Aug-2016

08:34

PresentationHost_v0400.dll

4.0.30319.36367

232,160

26-Aug-2016

09:41

PresentationHost_v0400.dll.mui

4.0.30319.36367

84,712

26-Aug-2016

09:41

PresentationHost_v0400.dll

4.0.30319.36367

186,080

26-Aug-2016

09:24

PresentationHost_v0400.dll.mui

4.0.30319.36367

84,872

26-Aug-2016

08:34

PresentationNative_v0400.dll

4.0.30319.36367

1,077,984

26-Aug-2016

09:41

PresentationNative_v0400.dll

4.0.30319.36367

790,240

26-Aug-2016

09:24

System.Core.dll

4.0.30319.36367

1,263,280

26-Aug-2016

08:34

System.Windows.Controls.Ribbon.dll

4.0.30319.36367

751,352

26-Aug-2016

08:34

System.Xaml.dll

4.0.30319.36367

631,976

26-Aug-2016

08:34

WindowsBase.dll

4.0.30319.36367

1,238,704

26-Aug-2016

08:34

WPFFontCache_v0400.exe.mui

4.0.30319.36367

19,168

26-Aug-2016

09:41

WPFFontCache_v0400.exe.mui

4.0.30319.36367

19,320

26-Aug-2016

08:34

WPFFontCache_v0400.exe

4.0.30319.36367

25,808

26-Aug-2016

09:41

WPFFontCache_v0400.exe

4.0.30319.36367

24,776

26-Aug-2016

09:24

wpfgfx_v0400.dll

4.0.30319.36367

2,108,600

26-Aug-2016

09:41

wpfgfx_v0400.dll

4.0.30319.36367

1,648,304

26-Aug-2016

09:24

VsVersion.dll

12.0.52367.36367

18,088

26-Aug-2016

09:41

VsVersion.dll

12.0.52367.36367

18,088

26-Aug-2016

09:24

msvcp120_clr0400.dll

12.0.52367.36367

678,592

26-Aug-2016

09:41

msvcp120_clr0400.dll

12.0.52367.36367

536,776

26-Aug-2016

09:24

msvcr120_clr0400.dll

12.0.52367.36367

869,568

26-Aug-2016

09:41

msvcr120_clr0400.dll

12.0.52367.36367

875,712

26-Aug-2016

09:24


Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support


Applies toThis article applies to the following:

  • Microsoft .NET Framework 4.5.2 when used with:

    • Windows Server 2008 Service Pack 2

    • Windows Vista Service Pack 2

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×