MS14-076: Vulnerability in Internet Information Services (IIS) could allow security feature bypass: November 11, 2014

적용 대상
Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows RT 8.1 Windows Server 2012 Datacenter Windows Server 2012 Datacenter Windows Server 2012 Standard Windows Server 2012 Standard Windows Server 2012 Essentials Windows Server 2012 Foundation Windows Server 2012 Foundation Windows 8 Enterprise Windows 8 Pro Windows 8 Windows RT

INTRODUCTION

Microsoft has released security bulletin MS14-076. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your Windows-based computer Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

More Information

Security Update Deployment

Windows 8 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name For all supported 32-bit editions of Windows 8:
Windows8-RT-KB2982998-v2-x86.msu
For all supported x64-based editions of Windows 8:
Windows8-RT-KB2982998-v2-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.
Removal information To uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows 8.1 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name For all supported 32-bit editions of Windows 8.1:
Windows8.1-KB2982998-v2-x86.msu
For all supported x64-based editions of Windows 8.1:
Windows8.1-KB2982998-v2-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.
Removal information To uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

Windows Server 2012 and Windows Server 2012 R2 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name For all supported editions of Windows Server 2012:
Windows8-RT-KB2982998-v2-x64.msu
For all supported editions of Windows Server 2012 R2:
Windows8.1-KB2982998-v2-x64.msu
Installation switches See Microsoft Knowledge Base Article 934307
Restart requirement This update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.
Removal information To uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.
File information See the file information section.
Registry key verification Note A registry key does not exist to validate the presence of this update.

      

FILE INFORMATION

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows 8 and Windows Server 2012 file information
  • The files that apply to a specific product, milestone (RTM,SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.2.920 0.16 xxx Windows 8 and Windows Server 2012 RTM GDR
    6.2.920 0.20 xxx Windows 8 and Windows Server 2012 RTM LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8

File name File version File size Date Time Platform
Diprestr.dll 8.0.9200.16384 28,672 26-Jul-2012 03:18 x86
Iprestr.dll 8.0.9200.17101 23,040 03-Sep-2014 02:48 x86
Diprestr.dll 8.0.9200.16384 28,672 26-Jul-2012 03:18 x86
Iprestr.dll 8.0.9200.21218 23,040 03-Sep-2014 02:34 x86

For all supported x64-based versions of Windows 8 and Windows Server 2012

File name File version File size Date Time Platform
Diprestr.dll 8.0.9200.16384 36,352 26-Jul-2012 03:05 x64
Iprestr.dll 8.0.9200.17101 28,160 03-Sep-2014 02:21 x64
Diprestr.dll 8.0.9200.16384 36,352 26-Jul-2012 03:05 x64
Iprestr.dll 8.0.9200.21218 28,160 03-Sep-2014 02:37 x64
Diprestr.dll 8.0.9200.16384 28,672 26-Jul-2012 03:18 x86
Iprestr.dll 8.0.9200.17101 23,040 03-Sep-2014 02:48 x86
Diprestr.dll 8.0.9200.16384 28,672 26-Jul-2012 03:18 x86
Iprestr.dll 8.0.9200.21218 23,040 03-Sep-2014 02:34 x86

      

Windows 8.1 and Windows Server 2012 R2 file information

For all supported x86-based versions of Windows 8.1

File name File version File size Date Time Platform
Diprestr.dll 8.5.9600.16384 29,696 22-Aug-2013 03:58 x86
Iprestr.dll 8.5.9600.17265 24,064 30-Aug-2014 03:52 x86

For all supported x64-based versions of Windows 8.1 and Windows Server 2012 R2

File name File version File size Date Time Platform
Diprestr.dll 8.5.9600.16384 36,352 22-Aug-2013 11:25 x64
Iprestr.dll 8.5.9600.17265 28,160 30-Aug-2014 04:07 x64
Diprestr.dll 8.5.9600.16384 29,696 22-Aug-2013 03:58 x86
Iprestr.dll 8.5.9600.17265 24,064 30-Aug-2014 03:52 x86

      

File hash information
Package Name Package Hash SHA1 Package Hash SHA2
Windows8.1-KB2982998-v2-x64.msu 976DC51F6A2E3E60770E3202BDC7B2BB038434A7 A69A659934601A78A1059E2BCF3D574A2EDA1EFB14BA966802FECF10C4FEDED6
Windows8.1-KB2982998-v2-x86.msu 59BC0AA96697414CA55BCD040044860B3A6D8FB9 8AB2B14B303037AB8D052202D8D4F9F42C1C3157E7F326431819F74C9A7FD935
Windows8-RT-KB2982998-v2-x64.msu 7B7E23814501F3C8974013E7CA2B904301170BF6 5BD1AF701A768766B851EF294E0900A392680654791280E02B72B3DFEE967D0C
Windows8-RT-KB2982998-v2-x86.msu 5038214A7E2A4B52CC9D3E6ABD501CE5D79070FF 5C38BAD664240B3707CD2F182BCD6C7749737249E3619499F2E2E514B6C1D76E