MS16-048:CSRSS 安全更新程序说明:2016 年 4 月 12 日

概要
此安全更新程序解决了 Microsoft Windows 中的一个漏洞。如果攻击者登录到目标系统并运行经特殊设计的应用程序,那么该漏洞可能允许绕过安全功能。

若要详细了解此漏洞,请参阅 Microsoft 安全公告 MS16-048
更多信息
重要
  • 今后所有适用于 Windows RT 8.1、Windows 8.1 和 Windows Server 2012 R2 的安全更新程序和与安全无关的更新程序均要求安装更新程序 2919355。我们建议你在基于 Windows RT 8.1、Windows 8.1 或 Windows Server 2012 R2 的计算机上安装更新程序 2919355,以便今后持续接收更新程序。
  • 如果在安装此更新程序后安装语言包,则必须重新安装此更新程序。因此,我们建议你先安装所需的全部语言包,然后再安装此更新程序。有关更多信息,请参阅将语言包添加到 Windows

此安全更新程序中的已知问题

  • 安装此安全更新程序后,运行第三方软件的一些系统可能会在计算机重启后显示 0x00000100 Stop 错误消息。

    如果第三方软件已替换 winload.exe 文件,则可能会出现此问题。已知执行此操作的软件包括 StorageCraft 提供的映像软件。

    请与软件的制造商联系,了解有关如何解决此问题的更多信息。

    本文提及的第三方产品由独立于 Microsoft 之外的公司生产。Microsoft 对这些产品的性能或可靠性不作任何明示或暗示的担保。
如何获取和安装此更新程序

方法 1:Windows 更新

此更新通过 Windows 更新提供。当你打开自动更新后,该更新将自动下载并安装。有关如何打开自动更新的详细信息,请参阅 自动获取安全更新程序

注意 对于 Windows RT 8.1,此更新程序只能通过 Windows 更新获得。

方法 2:Microsoft 下载中心

可以通过 Microsoft 下载中心获取独立的更新程序包。若要安装此更新程序,请按照下载页上的安装说明操作。

单击 Microsoft 安全公告 MS16-048 中与你运行的 Windows 版本相对应的下载链接。

如何获取此安全更新程序的相关帮助和支持

帮助安装更新程序:Microsoft 更新支持

面向 IT 专业人员的安全解决方案:TechNet 安全故障排除和支持

帮助保护基于 Windows 的计算机不受病毒和恶意软件的侵害:病毒解决方案和安全中心

基于国家/地区的本地支持:国际支持
文件信息

文件哈希信息

File nameSHA1 hashSHA256 hash
Windows8.1-KB3146723-x64.msu5AAE2A7642E87B2881D7337EF736EAEE679F907A7419BA7ECB7BCD962ECE7AEF269BEE633F6CBC4F4778D5F23CD3C7F7E8FC270F
Windows8.1-KB3146723-x86.msu5F3689532BF8969D68F21B7B3F82B111F8232F434FD9572130014B0AE6A075AC0DB772CEB350EBD385C867E4AB71642F39EC29EE
Windows8-RT-KB3146723-x64.msu682AE0931C3FA2AFA4E988B8FD08249F15E1D97706D3E3F90C3863E7A970757446DD87CC47C5EF7F08F406F9B49FF5C988158D86
Windows8-RT-KB3146723-x64_New58.msuB629DB9F3EBB85B40A61A1CC5DEA13C11A124B6CDB652213B70BA0D0CC19ADD967BA933465FE76FD0C74D785458CB8172461B6E0

文件信息

此软件更新程序的英语(美国)版本将安装具有下表所列属性的文件。

Windows 8.1 和 Windows Server 2012 R2 文件信息

注意
  • 通过检查下表中显示的文件版本号,可以识别适用于特定产品、里程碑(RTM、SPn)和服务分支(LDR、GDR)的文件:
    版本产品里程碑服务分支
    6.3.960 0.17xxxWindows RT 8.1、Windows 8.1 和 Windows Server 2012 R2RTMGDR
  • GDR 服务分支仅包含那些广泛发布以解决广泛分布的关键问题的修补程序。除广泛发布的修补程序以外,LDR 服务分支还包含其他修补程序。
  • 已安装的 MANIFEST 文件 (.manifest) 和 MUM 文件 (.mum) 没有列出。
对于所有受支持的基于 x64 的版本
File nameFile versionFile sizeDateTimePlatformService branch
Chs_boot.ttfNot applicable3,695,65503-Mar-201619:28Not applicableNot applicable
Msyhn_boot.ttfNot applicable150,72703-Mar-201619:28Not applicableNot applicable
Msyh_boot.ttfNot applicable154,83303-Mar-201619:28Not applicableNot applicable
Cht_boot.ttfNot applicable3,878,34703-Mar-201619:28Not applicableNot applicable
Msjhn_boot.ttfNot applicable161,49103-Mar-201619:28Not applicableNot applicable
Msjh_boot.ttfNot applicable163,49803-Mar-201619:28Not applicableNot applicable
Segmono_boot.ttfNot applicable44,62303-Mar-201619:28Not applicableNot applicable
Segoen_slboot.ttfNot applicable85,69103-Mar-201619:28Not applicableNot applicable
Segoe_slboot.ttfNot applicable86,00703-Mar-201619:28Not applicableNot applicable
Wgl4_boot.ttfNot applicable49,02703-Mar-201619:28Not applicableNot applicable
Jpn_boot.ttfNot applicable1,985,80303-Mar-201619:28Not applicableNot applicable
Meiryon_boot.ttfNot applicable141,49103-Mar-201619:28Not applicableNot applicable
Meiryo_boot.ttfNot applicable143,10803-Mar-201619:28Not applicableNot applicable
Kor_boot.ttfNot applicable2,372,93503-Mar-201619:28Not applicableNot applicable
Malgunn_boot.ttfNot applicable174,36703-Mar-201619:28Not applicableNot applicable
Malgun_boot.ttfNot applicable176,81203-Mar-201619:28Not applicableNot applicable
Winload.efi6.3.9600.182581,663,19203-Mar-201619:27Not applicableNot applicable
Winload.exe6.3.9600.182581,523,21603-Mar-201619:27x64Not applicable
Winresume.efi6.3.9600.182581,490,12803-Mar-201619:27Not applicableNot applicable
Winresume.exe6.3.9600.182581,358,96003-Mar-201619:27x64Not applicable
Basesrv.dll6.3.9600.1825859,39203-Mar-201616:13x64Not applicable
Csrsrv.dll6.3.9600.1793359,39213-Jul-201519:46x64Not applicable
Ntdll.dll6.3.9600.182581,737,08803-Mar-201619:27x64Not applicable
Ntoskrnl.exe6.3.9600.182587,452,51203-Mar-201619:28x64Not applicable
Microsoft-windows-system-events.dll6.3.9600.18258246,78403-Mar-201618:29x64Not applicable
Krnlprov.dll6.3.9600.1825846,59203-Mar-201618:06x64Not applicable
Krnlprov.mofNot applicable14,84022-Aug-201306:51Not applicableNot applicable
Ntvdm64.dll6.3.9600.1814616,89621-Nov-201518:32x64AMD64_MICROSOFT-WINDOWS-WOW
Wow64.dll6.3.9600.17734285,18420-Mar-201504:10x64AMD64_MICROSOFT-WINDOWS-WOW
Wow64cpu.dll6.3.9600.1773413,31220-Mar-201504:10x64AMD64_MICROSOFT-WINDOWS-WOW
Ntdll.dll6.3.9600.182581,501,49603-Mar-201618:38x86Not applicable
Acwow64.dll6.3.9600.1773437,37620-Mar-201503:06x86WOW64_MICROSOFT-WINDOWS-WOW
Instnm.exe6.3.9600.174758,70429-Oct-201401:13x86WOW64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll6.3.9600.1814614,33621-Nov-201517:50x86WOW64_MICROSOFT-WINDOWS-WOW
Setup16.exe3.1.0.191825,60029-Oct-201401:13x86WOW64_MICROSOFT-WINDOWS-WOW
User.exe6.3.9600.174754,09629-Oct-201401:14x86WOW64_MICROSOFT-WINDOWS-WOW
Wow32.dll6.3.9600.174755,63229-Oct-201401:15x86WOW64_MICROSOFT-WINDOWS-WOW
对于所有受支持的基于 x86 的版本
File nameFile versionFile sizeDateTimePlatform
Chs_boot.ttfNot applicable3,695,65803-Mar-201618:43Not applicable
Msyhn_boot.ttfNot applicable150,73003-Mar-201618:43Not applicable
Msyh_boot.ttfNot applicable154,83103-Mar-201618:43Not applicable
Cht_boot.ttfNot applicable3,878,35003-Mar-201618:43Not applicable
Msjhn_boot.ttfNot applicable161,49503-Mar-201618:43Not applicable
Msjh_boot.ttfNot applicable163,49903-Mar-201618:43Not applicable
Segmono_boot.ttfNot applicable44,62303-Mar-201618:43Not applicable
Segoen_slboot.ttfNot applicable85,68803-Mar-201618:43Not applicable
Segoe_slboot.ttfNot applicable86,00703-Mar-201618:43Not applicable
Wgl4_boot.ttfNot applicable49,02403-Mar-201618:39Not applicable
Jpn_boot.ttfNot applicable1,985,80303-Mar-201618:43Not applicable
Meiryon_boot.ttfNot applicable141,49103-Mar-201618:43Not applicable
Meiryo_boot.ttfNot applicable143,11103-Mar-201618:43Not applicable
Kor_boot.ttfNot applicable2,372,93503-Mar-201618:43Not applicable
Malgunn_boot.ttfNot applicable174,36703-Mar-201618:43Not applicable
Malgun_boot.ttfNot applicable176,81503-Mar-201618:43Not applicable
Winload.efi6.3.9600.182581,396,69603-Mar-201618:38Not applicable
Winload.exe6.3.9600.182581,285,60803-Mar-201618:38x86
Winresume.efi6.3.9600.182581,272,19203-Mar-201618:38Not applicable
Winresume.exe6.3.9600.182581,172,00003-Mar-201618:38x86
Basesrv.dll6.3.9600.1825850,68803-Mar-201616:11x86
Csrsrv.dll6.3.9600.1793348,64013-Jul-201519:27x86
Ntdll.dll6.3.9600.182581,471,55203-Mar-201618:38x86
Ntoskrnl.exe6.3.9600.182585,764,44803-Mar-201618:43Not applicable
Microsoft-windows-system-events.dll6.3.9600.18258246,78403-Mar-201617:49x86
Krnlprov.dll6.3.9600.1825838,91203-Mar-201617:30x86
Krnlprov.mofNot applicable14,84021-Aug-201323:46Not applicable

Windows Server 2012 文件信息

注意
  • 通过检查下表中显示的文件版本号,可以识别适用于特定产品、里程碑(RTM、SPn)和服务分支(LDR、GDR)的文件:
    版本产品里程碑服务分支
    6.2.920 0.17xxxWindows 8、Windows RT 或 Windows Server 2012RTMGDR
    6.2.920 0.21xxxWindows 8、Windows RT 或 Windows Server 2012RTMLDR
  • GDR 服务分支仅包含那些广泛发布以解决广泛分布的关键问题的修补程序。除广泛发布的修补程序以外,LDR 服务分支还包含其他修补程序。
  • 已安装的 MANIFEST 文件 (.manifest) 和 MUM 文件 (.mum) 没有列出。
对于所有受支持的基于 x64 的版本
File nameFile versionFile sizeDateTimePlatform
Basesrv.dll6.2.9200.2179354,27203-Mar-201621:48x64
对于所有受支持的基于 x64 的版本
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Advapi32.dll6.2.9200.21820895,48829-Mar-201621:47x64NoneNot applicable
Winload.efi6.2.9200.216381,405,40822-Sep-201521:46Not applicableNoneNot applicable
Winload.exe6.2.9200.216381,273,18422-Sep-201521:46x64NoneNot applicable
Winresume.efi6.2.9200.207261,217,35225-May-201300:17Not applicableNoneNot applicable
Winresume.exe6.2.9200.207261,093,90425-May-201300:17x64NoneNot applicable
Basesrv.dll6.2.9200.2182054,27229-Mar-201621:47x64NoneNot applicable
Csrsrv.dll6.2.9200.2154848,12811-Jul-201518:07x64NoneNot applicable
Ksecdd.sys6.2.9200.21473100,18402-May-201506:23x64NoneNot applicable
Lsass.exe6.2.9200.2052135,84020-Sep-201206:33x64NoneNot applicable
Sspicli.dll6.2.9200.21703164,35217-Nov-201508:00x64NoneNot applicable
Sspisrv.dll6.2.9200.2052127,64820-Sep-201206:32x64NoneNot applicable
Cng.sys6.2.9200.21637566,07222-Sep-201513:43x64NoneNot applicable
Ksecpkg.sys6.2.9200.21703171,35217-Nov-201509:52x64NoneNot applicable
Lsasrv.dll6.2.9200.218201,280,00029-Mar-201621:48x64NoneNot applicable
Adtschema.dll6.2.9200.21289719,36010-Nov-201404:43x64NoneNot applicable
Msaudite.dll6.2.9200.21269146,94411-Oct-201405:38x64NoneNot applicable
Msobjs.dll6.2.9200.1638461,95226-Jul-201202:36x64NoneNot applicable
Ntdll.dll6.2.9200.218201,821,70430-Mar-201601:32x64NoneNot applicable
Ocspsvcctrs.iniNot applicable2,96026-Jul-201205:07Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,13426-Jul-201208:00Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,91826-Jul-201204:43Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,21026-Jul-201207:59Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,09826-Jul-201208:00Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02826-Jul-201207:59Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,14026-Jul-201205:21Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,64226-Jul-201208:11Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,57626-Jul-201205:20Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02626-Jul-201207:36Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02826-Jul-201207:48Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,18826-Jul-201205:30Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,12626-Jul-201205:08Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,06426-Jul-201207:49Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,09226-Jul-201207:52Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,82826-Jul-201205:12Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,46426-Jul-201208:05Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,48026-Jul-201205:13Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,46026-Jul-201208:11Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvc.exe6.2.9200.21345272,38415-Jan-201505:27x64SPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.hNot applicable1,56902-Jun-201214:34Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,91802-Jun-201214:34Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ntoskrnl.exe6.2.9200.218216,938,46430-Mar-201601:34x64NoneNot applicable
Credssp.dll6.2.9200.2170320,48017-Nov-201507:59x64SP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.dll6.2.9200.2170394,72017-Nov-201508:01x64SP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.mofNot applicable96402-Jun-201214:33Not applicableSP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Wdigest.dll6.2.9200.21703208,89617-Nov-201508:01x64NoneNot applicable
Kerberos.dll6.2.9200.21820830,46429-Mar-201621:48x64NoneNot applicable
Msv1_0.dll6.2.9200.21820317,95229-Mar-201621:48x64NoneNot applicable
Shcore.dll6.2.9200.21703590,84817-Nov-201508:00x64NoneNot applicable
Mrxsmb10.sys6.2.9200.21529281,60025-Jun-201518:52x64NoneNot applicable
Mrxsmb20.sys6.2.9200.21548205,31211-Jul-201517:07x64NoneNot applicable
Mrxsmb.sys6.2.9200.21342396,80006-Jan-201523:17x64NoneNot applicable
Lsm.dll6.2.9200.21703439,80817-Nov-201508:00x64NoneNot applicable
Workerdd.dll6.2.9200.2101214,84812-Apr-201406:58x64NoneNot applicable
Usercpl.dll6.2.9200.217031,043,96817-Nov-201508:01x64NoneNot applicable
Usercpl.ptxmlNot applicable78911-Oct-201200:40Not applicableNoneNot applicable
Winlogon.exe6.2.9200.21703578,04817-Nov-201508:01x64NoneNot applicable
Sspicli.dll6.2.9200.2098499,84010-Mar-201401:34x86NoneNot applicable
Ntdll.dll6.2.9200.218211,413,12030-Mar-201600:14x86NoneNot applicable
Wdigest.dll6.2.9200.21703176,64017-Nov-201508:09x86NoneNot applicable
Kerberos.dll6.2.9200.21821666,62429-Mar-201623:58x86NoneNot applicable
Msv1_0.dll6.2.9200.21821274,94429-Mar-201623:58x86NoneNot applicable
Advapi32.dll6.2.9200.21821704,00029-Mar-201623:57x86NoneNot applicable
Adtschema.dll6.2.9200.21289719,36010-Nov-201403:40x86NoneNot applicable
Msaudite.dll6.2.9200.21269146,94411-Oct-201404:35x86NoneNot applicable
Msobjs.dll6.2.9200.1638461,95226-Jul-201202:47x86NoneNot applicable
Credssp.dll6.2.9200.2170317,40817-Nov-201508:08x86SP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.dll6.2.9200.2170376,80017-Nov-201508:09x86SP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.mofNot applicable96402-Jun-201214:33Not applicableSP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Shcore.dll6.2.9200.21703460,80017-Nov-201508:09x86NoneNot applicable
Usercpl.dll6.2.9200.21703961,53617-Nov-201508:09x86NoneNot applicable
Usercpl.ptxmlNot applicable78911-Oct-201200:42Not applicableNoneNot applicable
malicious attacker exploit
属性

文章 ID:3146723 - 上次审阅时间:04/28/2016 13:19:00 - 修订版本: 4.0

Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard, Windows Server 2012 R2 Essentials, Windows Server 2012 R2 Foundation, Windows 8.1 Enterprise, Windows 8.1 Pro, Windows 8.1, Windows RT 8.1, Windows Server 2012 Datacenter, Windows Server 2012 Standard, Windows Server 2012 Essentials, Windows Server 2012 Foundation

  • atdownload kbbug kbexpertiseinter kbfix kbsecbulletin kbsecurity kbsecvulnerability KB3146723
反馈