MS16-120: Description of the security update for the .NET Framework 4.6 for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016: October 11, 2016

Summary
This update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document. This update addresses the vulnerabilities by correcting how the Windows font library handles embedded fonts. To learn more about this vulnerability, see Microsoft Security Bulletin MS16-120.

Important
  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.
  • This security update requires the Windows dwrite.dll component. Up-to-date Windows Vista SP2 and Windows Server 2008 SP2 systems are expected to have this component installed. If dwrite.dll is not present on a system, it can be downloaded here. Windows Update, WSUS, and Microsoft Update Catalog customers will receive the Windows dwrite.dll component through the 3078601 update as an automatic co-installation, in case it’s not already present.

Additional information about this security update

For more information about this security update as it relates to Windows Vista and Windows Server 2008, see the following article in the Microsoft Knowledge Base:

3188736 MS16-120: Description of the Security and Quality Rollup .NET Framework 3.0 Service Pack 2, 4.5.2, and 4.6 updates for Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: October 11, 2016

How to obtain and install this update

Method 1: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 2: Windows Software Update Services (WSUS)

On the WSUS server, follow these steps:
  1. Click Start, click Administrative Tools, and then click Microsoft Windows Server Update Services 3.0.
  2. Expand ComputerName, and then click Action.
  3. Click Import Updates.
  4. If WSUS opens a browser window in which you are prompted to install an ActiveX control, install the control to continue.

    Note After the ActiveX control is installed, the Microsoft Update Catalog screen opens.
  5. Enter some search criteria in the Search box, and then click Search.
  6. Locate the .NET Framework packages that match the operating systems, languages, and processors in your environment. Click Add to add them to your basket.
  7. When you have selected all the packages that you require, click View Basket.
  8. Click Import to import the packages into your WSUS server.
  9. After the packages have been imported, click Close to return to WSUS.

The updates are now available for installation through WSUS.

Update deployment information

For deployment information about this update, see Microsoft Knowledge Base article 3192884.

Update removal information

Note We do not recommend that you remove any security update.

To remove this update, use the Programs and Features item in Control Panel.

Update restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement information

This update replaces previously released update 3099874.

File information

File hash

File nameSHA1 hashSHA256 hash
NDP46-KB3189040-x86.exe90E31995BF9A2F015E00856AA59A205E88889126AAD9FE612C7B927C96440AAFA64D0589C7C30475A8317B39FF0952C8DF9C484B
NDP46-KB3189040-x64.exe73B3A35CF06AB72C43AC399188F032B07F68EF64F39177A32C440A70BE03107ED88785E1DB3698A7C455A16F40DB0BE49375D0F8

File attributes

The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

For all supported x86-based versions of systems

File nameFile versionFile sizeDateTimePlatform
Dhtmlheader.htmlNot applicable16,11803-Aug-201611:42Not applicable
Header.bmpNot applicable7,30621-Jul-201602:41Not applicable
Ndp46-kb3189040.mspNot applicable5,709,82426-Aug-201604:49Not applicable
Parameterinfo.xmlNot applicable47,92226-Aug-201604:49Not applicable
Setup.exe14.0.1085.088,21605-Aug-201622:09x86
Setupengine.dll14.0.1085.0876,20805-Aug-201622:09x86
Setupui.dll14.0.1085.0320,16005-Aug-201622:09x86
Setupui.xsdNot applicable32,57203-Aug-201611:42Not applicable
Setuputility.exe14.0.1085.0219,31205-Aug-201622:09x86
Splashscreen.bmpNot applicable196,66221-Jul-201602:45Not applicable
Sqmapi.dll6.2.9200.16384226,45603-Aug-201611:41x86
Strings.xmlNot applicable14,09221-Jul-201602:45Not applicable
Uiinfo.xmlNot applicable36,42821-Jul-201602:45Not applicable
Watermark.bmpNot applicable110,34821-Jul-201602:41Not applicable
Eula.rtfNot applicable124,49503-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable79,05226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.028,85605-Aug-201622:14x86
Eula.rtfNot applicable160,29503-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable68,13626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.025,43205-Aug-201622:14x86
Eula.rtfNot applicable132,34803-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable84,75626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable131,63703-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable82,39226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable111,18603-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable87,03026-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.031,05605-Aug-201622:14x86
Eula.rtfNot applicable142,04103-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable89,04226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.031,57605-Aug-201622:14x86
Eula.rtfNot applicable128,31403-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable82,07626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.029,01605-Aug-201622:14x86
Eula.rtfNot applicable137,24703-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable82,91426-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable156,44003-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable86,78826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.031,06405-Aug-201622:14x86
Eula.rtfNot applicable146,39203-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable77,53626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.028,50405-Aug-201622:14x86
Eula.rtfNot applicable158,42003-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable85,62826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.031,05605-Aug-201622:14x86
Eula.rtfNot applicable147,27503-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable84,69626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,55205-Aug-201622:14x86
Eula.rtfNot applicable155,61603-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable74,00426-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.026,96805-Aug-201622:14x86
Eula.rtfNot applicable259,43203-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable72,31626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.026,45605-Aug-201622:14x86
Eula.rtfNot applicable137,81203-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable84,24626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.031,05605-Aug-201622:14x86
Eula.rtfNot applicable148,37603-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable83,74426-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.029,52805-Aug-201622:14x86
Eula.rtfNot applicable151,63503-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable86,61226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,55205-Aug-201622:14x86
Eula.rtfNot applicable137,22603-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable83,53226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable188,74103-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable85,17826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,55205-Aug-201622:14x86
Eula.rtfNot applicable149,23603-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable82,38626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable140,17103-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable82,34826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable146,27303-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable68,08226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.025,43205-Aug-201622:14x86
Eula.rtfNot applicable147,66203-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable85,15826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,55205-Aug-201622:14x86
Eula.rtfNot applicable129,88303-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable84,43826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,54405-Aug-201622:14x86
Print.icoNot applicable126,13203-Aug-201611:42Not applicable
Rotate1.icoNot applicable143,90103-Aug-201611:42Not applicable
Rotate10.icoNot applicable143,93203-Aug-201611:42Not applicable
Rotate2.icoNot applicable144,11003-Aug-201611:42Not applicable
Rotate3.icoNot applicable144,15103-Aug-201611:42Not applicable
Rotate4.icoNot applicable144,03303-Aug-201611:42Not applicable
Rotate5.icoNot applicable143,87103-Aug-201611:42Not applicable
Rotate6.icoNot applicable143,88103-Aug-201611:42Not applicable
Rotate7.icoNot applicable144,08403-Aug-201611:42Not applicable
Rotate8.icoNot applicable143,83503-Aug-201611:42Not applicable
Rotate9.icoNot applicable144,06403-Aug-201611:42Not applicable
Save.icoNot applicable126,54803-Aug-201611:42Not applicable
Setup.icoNot applicable126,24603-Aug-201611:42Not applicable
Stop.icoNot applicable190,19903-Aug-201611:42Not applicable
Sysreqmet.icoNot applicable136,31303-Aug-201611:42Not applicable
Sysreqnotmet.icoNot applicable143,99003-Aug-201611:42Not applicable
Warn.icoNot applicable199,34103-Aug-201611:42Not applicable

For all supported x64-based versions of systems

File nameFile versionFile sizeDateTimePlatform
Dhtmlheader.htmlNot applicable16,11803-Aug-201611:42Not applicable
Header.bmpNot applicable7,30621-Jul-201602:41Not applicable
Ndp46-kb3189040.mspNot applicable8,187,90426-Aug-201605:09Not applicable
Parameterinfo.xmlNot applicable47,92226-Aug-201605:09Not applicable
Setup.exe14.0.1085.088,21605-Aug-201622:09x86
Setupengine.dll14.0.1085.0876,20805-Aug-201622:09x86
Setupui.dll14.0.1085.0320,16005-Aug-201622:09x86
Setupui.xsdNot applicable32,57203-Aug-201611:42Not applicable
Setuputility.exe14.0.1085.0219,31205-Aug-201622:09x86
Splashscreen.bmpNot applicable196,66221-Jul-201602:45Not applicable
Sqmapi.dll6.2.9200.16384226,45603-Aug-201611:41x86
Strings.xmlNot applicable14,09221-Jul-201602:45Not applicable
Uiinfo.xmlNot applicable36,42821-Jul-201602:45Not applicable
Watermark.bmpNot applicable110,34821-Jul-201602:41Not applicable
Eula.rtfNot applicable124,49503-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable79,05226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.028,85605-Aug-201622:14x86
Eula.rtfNot applicable160,29503-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable68,13626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.025,43205-Aug-201622:14x86
Eula.rtfNot applicable132,34803-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable84,75626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable131,63703-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable82,39226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable111,18603-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable87,03026-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.031,05605-Aug-201622:14x86
Eula.rtfNot applicable142,04103-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable89,04226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.031,57605-Aug-201622:14x86
Eula.rtfNot applicable128,31403-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable82,07626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.029,01605-Aug-201622:14x86
Eula.rtfNot applicable137,24703-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable82,91426-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable156,44003-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable86,78826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.031,06405-Aug-201622:14x86
Eula.rtfNot applicable146,39203-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable77,53626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.028,50405-Aug-201622:14x86
Eula.rtfNot applicable158,42003-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable85,62826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.031,05605-Aug-201622:14x86
Eula.rtfNot applicable147,27503-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable84,69626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,55205-Aug-201622:14x86
Eula.rtfNot applicable155,61603-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable74,00426-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.026,96805-Aug-201622:14x86
Eula.rtfNot applicable259,43203-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable72,31626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.026,45605-Aug-201622:14x86
Eula.rtfNot applicable137,81203-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable84,24626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.031,05605-Aug-201622:14x86
Eula.rtfNot applicable148,37603-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable83,74426-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.029,52805-Aug-201622:14x86
Eula.rtfNot applicable151,63503-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable86,61226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,55205-Aug-201622:14x86
Eula.rtfNot applicable137,22603-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable83,53226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable188,74103-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable85,17826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,55205-Aug-201622:14x86
Eula.rtfNot applicable149,23603-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable82,38626-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable140,17103-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable82,34826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,04005-Aug-201622:14x86
Eula.rtfNot applicable146,27303-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable68,08226-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.025,43205-Aug-201622:14x86
Eula.rtfNot applicable147,66203-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable85,15826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,55205-Aug-201622:14x86
Eula.rtfNot applicable129,88303-Aug-201611:36Not applicable
Localizeddata.xmlNot applicable84,43826-Aug-201604:34Not applicable
Setupresources.dll14.0.1085.030,54405-Aug-201622:14x86
Print.icoNot applicable126,13203-Aug-201611:42Not applicable
Rotate1.icoNot applicable143,90103-Aug-201611:42Not applicable
Rotate10.icoNot applicable143,93203-Aug-201611:42Not applicable
Rotate2.icoNot applicable144,11003-Aug-201611:42Not applicable
Rotate3.icoNot applicable144,15103-Aug-201611:42Not applicable
Rotate4.icoNot applicable144,03303-Aug-201611:42Not applicable
Rotate5.icoNot applicable143,87103-Aug-201611:42Not applicable
Rotate6.icoNot applicable143,88103-Aug-201611:42Not applicable
Rotate7.icoNot applicable144,08403-Aug-201611:42Not applicable
Rotate8.icoNot applicable143,83503-Aug-201611:42Not applicable
Rotate9.icoNot applicable144,06403-Aug-201611:42Not applicable
Save.icoNot applicable126,54803-Aug-201611:42Not applicable
Setup.icoNot applicable126,24603-Aug-201611:42Not applicable
Stop.icoNot applicable190,19903-Aug-201611:42Not applicable
Sysreqmet.icoNot applicable136,31303-Aug-201611:42Not applicable
Sysreqnotmet.icoNot applicable143,99003-Aug-201611:42Not applicable
Warn.icoNot applicable199,34103-Aug-201611:42Not applicable

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Applies to

This article applies to the following:
  • Microsoft .NET Framework 4.6 when used with:
    • Windows Server 2008 Service Pack 2
    • Windows Vista Service Pack 2
Thuộc tính

ID Bài viết: 3189040 - Xem lại Lần cuối: 10/11/2016 16:14:00 - Bản sửa đổi: 1.0

Microsoft .NET Framework 4.6

  • kbsecvulnerability kbsecurity kbsecbulletin kbfix kbexpertiseinter kbbug atdownload KB3189040
Phản hồi