MS15-028: Vulnerability in Windows Task Scheduler could allow security feature bypass: March 10, 2015

Áp dụng cho
Windows Server 2012 R2 Datacenter Windows Server 2012 R2 Standard Windows Server 2012 R2 Essentials Windows Server 2012 R2 Foundation Windows 8.1 Enterprise Windows 8.1 Pro Windows 8.1 Windows RT 8.1 Windows Server 2012 Datacenter Windows Server 2012 Standard Windows Server 2012 Essentials Windows Server 2012 Foundation Windows 8 Enterprise Windows 8 Pro Windows 8 Windows RT Windows Server 2008 R2 Service Pack 1 Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows Server 2008 R2 Web Edition Windows Server 2008 R2 Foundation Windows 7 Service Pack 1 Windows 7 Ultimate Windows 7 Enterprise Windows 7 Professional Windows 7 Home Premium Windows 7 Home Basic Windows 7 Starter

Summary

This security update resolves a privately reported vulnerability in Windows. This vulnerability could allow users who have limited rights on an affected system to use Task Scheduler to execute files that they do not have permissions to run. To learn more about the vulnerability, see Microsoft Security Bulletin MS15-028.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Note For Windows RT and Windows RT 8.1, this update is available through Windows Update only.

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

   Click the download link in the following table that corresponds to the version of Windows you are running.

Windows version Download link
Windows 7 SP1 Download Download 32-bit (KB3030377)
Download Download 64-bit (KB3030377)
Windows Server 2008 R2 SP1 Download Download 64-bit (KB3030377)
Download Download Itanium-based (KB3030377)
Windows 8 Download Download 32-bit (KB3030377)
Download Download 64-bit (KB3030377)
Windows Server 2012 Download Download 64-bit (KB3030377)
Windows 8.1 Download Download 32-bit (KB3030377)
Download Download 64-bit (KB3030377)
Windows Server 2012 R2 Download Download 64-bit (KB3030377)

      

More Information

Security update deployment information

File name

Windows version File name
Windows 7 For 32-bit, Windows6.1-KB3030377-x86.msu
For 64-bit, Windows6.1-KB3030377-x64.msu
Windows Server 2008 R2 For 64-bit, Windows6.1-KB3030377-x64.msu
For Itanium-based, Windows6.1-KB3030377-ia64.msu
Windows 8 For 32-bit, Windows8-RT-KB3030377-x86.msu
For 64-bit, Windows8-RT-KB3030377-x64.msu
Windows Server 2012 For 64-bit, Windows8-RT-KB3030377-x64.msu
Windows 8.1 For 32-bit, Windows8.1-KB3030377-x86.msu
For 64-bit, Windows8.1-KB3030377-x64.msu
Windows Server 2012 R2 For 64-bit, Windows8.1-KB3030377-x64.msu

Note For Windows RT and Windows RT 8.1, this update is available from Windows Update only.

Installation SwitchesSee Microsoft Knowledge Base Article 934307.

Restart requirementsYou must restart your system after you apply this security update.

Removal information

Windows version How to remove the update
Windows 7 and Windows Server 2008 R2 To uninstall an update that was installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, and then under Windows Update, click View installed updates and select from the list of updates.
Windows 8, Windows Server 2012, Windows 8.1, and Windows Server 2012 R2 To uninstall an update that was installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.
Windows RT and Windows RT 8.1 Click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.

Registry key verificationA registry key does not exist to validate the presence of this update.

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows 7 and Windows Server 2008 R2 file information

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.1.7601.18xxx Windows 7 and Windows Server 2008 R2 SP1 GDR
    6.1.7601.22xxx Windows 7 and Windows Server 2008 R2 SP1 LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 7

File name File version File size Date Time Platform
Ubpm.dll 6.1.7601.18741 171,520 03-Feb-2015 03:12 x86
Ubpm.dll 6.1.7601.22948 171,520 03-Feb-2015 03:32 x86

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File name File version File size Date Time Platform
Ubpm.dll 6.1.7601.18741 215,552 03-Feb-2015 03:31 x64
Ubpm.dll 6.1.7601.22948 215,040 03-Feb-2015 03:51 x64
Ubpm.dll 6.1.7601.18741 171,520 03-Feb-2015 03:12 x86
Ubpm.dll 6.1.7601.22948 171,520 03-Feb-2015 03:32 x86

For all supported IA-64-based versions of Windows Server 2008 R2

File name File version File size Date Time Platform
Ubpm.dll 6.1.7601.18741 488,960 03-Feb-2015 02:52 IA-64
Ubpm.dll 6.1.7601.22948 488,960 03-Feb-2015 02:43 IA-64
Ubpm.dll 6.1.7601.18741 171,520 03-Feb-2015 03:12 x86
Ubpm.dll 6.1.7601.22948 171,520 03-Feb-2015 03:32 x86

Windows 8 and Windows Server 2012 file information

  • The files that apply to a specific product, milestone (RTM,SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version Product Milestone Service branch
    6.2.920 0.16 xxx Windows 8 and Windows Server 2012 RTM GDR
    6.2.920 0.20 xxx Windows 8 and Windows Server 2012 RTM LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8

File name File version File size Date Time Platform
Ubpm.dll 6.2.9200.17247 243,712 24-Jan-2015 05:00 x86
Ubpm.dll 6.2.9200.21364 248,320 24-Jan-2015 04:46 x86

For all supported x64-based versions of Windows 8 and Windows Server 2012

File name File version File size Date Time Platform
Ubpm.dll 6.2.9200.17247 325,632 24-Jan-2015 06:42 x64
Ubpm.dll 6.2.9200.21364 317,952 24-Jan-2015 05:40 x64
Ubpm.dll 6.2.9200.17247 243,712 24-Jan-2015 05:00 x86
Ubpm.dll 6.2.9200.21364 248,320 24-Jan-2015 04:46 x86

Windows 8.1 and Windows Server 2012 R2 file information

For all supported x86-based versions of Windows 8.1

File name File version File size Date Time Platform
Ubpm.dll 6.3.9600.17671 162,304 30-Jan-2015 23:20 x86

For all supported x64-based versions of Windows 8.1 and Windows Server 2012 R2

File name File version File size Date Time Platform
Ubpm.dll 6.3.9600.17671 203,264 30-Jan-2015 23:20 x64

      

File hash information
File name SHA1 hash SHA256 hash
Windows6.1-KB3030377-ia64.msu 022DE7B41A2641039A4FCB52F629324E21024690 BDBFFA9F7FE09136DB35C3D0E64BA0825CA7063863038CE3FEAE8C0F22B09034
Windows6.1-KB3030377-ia64.msu 21E525F421C9B21DF65426F0D666AC2BE59F02AF 7612DFE7199601998C9BFC734F2361EA0B5D66AB62D287A9CB805C92EDB15C96
Windows6.1-KB3030377-x64.msu 84403E576DE8606703954E00ABCC573F24663DEF 05CCDB1223B74C5E559A102681E0BD33677302367D7A119C9A63B8A8E70FED64
Windows6.1-KB3030377-x64.msu DC9AA7CF326131F9C4BF25FA2790E68F0DF299AD 86881AEEA78B33B8E1635998868C4E1FC48E1AF08D3707F01C347F56C5492FC1
Windows6.1-KB3030377-x86.msu 84BA5F6F713FFE1004F8D2D75677AD98331C3890 A810150967AE32C9807AFF76EB3C49B3E55772D7F6E8C6ECE89FB7CD25AA3982
Windows6.1-KB3030377-x86.msu 8E7AEADBA26FD06F5C2C98D8481D96278333094F D8A37A580E66D05422D1C8F1E2D4874FD96358BC856AA5CACA92030795BC2650
Windows8.1-KB3030377-x64.msu 4DCBE286AC34E19BE1715B698C5613CF16E51433 B6FC9F8729F806D7DF1A5EC43609AAAC1CFDEFCE8FEE5ED3B289636F6499428E
Windows8.1-KB3030377-x64.msu E605A90272CEE1A34F52B4B680DEC048D66DB5A5 BE9859F26076C86CB91F60738AF84B2CEAB82EA41CCEC36A48FA7D44CC3B0100
Windows8.1-KB3030377-x86.msu EA03F7A1DD9F1DD350575D5EFA5D77AF6C4251E0 A35739340C1FB274A69BCE2EA5951027DC5E0A6FC79582EAF0862A2465F38749
Windows8.1-KB3030377-x86.msu F4473F2C6085236CA84C98AA6B49F45FB90F4E25 93501A2579A251C43310F5E1EFA075D342839DC74EDEDC0131A44BFA03570395
Windows8-RT-KB3030377-x64.msu 59F7E0DB4C95DB595F9E7FDDA478C3C2C84CED65 2F9888E4CF05EFB44B79FC95E4E3041CE1A24C81DF63946F1387664D175D44DC
Windows8-RT-KB3030377-x86.msu 2DFD090FCA3F543A0B4FC1A8673EDDC1C75885A1 8858036530935A66104F2E7DF18CA7CA264119A47193141DA2970666BC1EB20B

      

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support