MS16-048:說明 CSRSS 的安全性更新:2016 年 4 月 12 日

結論
此安全性更新可解決 Windows 的弱點。這個弱點可能會在攻擊者登入目標系統且執行蓄意製作的應用程式時,允許資訊安全功能略過。

若要深入了解這項弱點,請參閱 Microsoft 資訊安全公告 MS16-048
其他相關資訊
重要
  • 您必須安裝更新 2919355,才能收到所有 Windows RT 8.1、Windows 8.1 及 Windows Server 2012 R2 的未來安全性和非安全性更新。我們建議您在您的 Windows RT 8.1、Windows 8.1 或 Windows Server 2012 R2 電腦上安裝更新 2919355 以便取得未來的更新。
  • 如果您在安裝此更新後安裝語言套件,您必須重新安裝此更新。因此,我們建議您在安裝此更新前,先安裝任何需要的語言套件。如需詳細資訊,請參閱將語言套件新增到 Windows

此安全性更新的已知問題

  • 安裝此安全性更新後,執行協力廠商軟體的某些系統可能在電腦重新啟動後顯示 0x00000100 Stop 錯誤訊息。

    如果協力廠商軟體已取代 winload.exe 檔案,就可能發生此問題。已知會有此行為的軟體包括來自 StorageCraft 的映像軟體。

    請連絡軟體製造商以取得解決此問題方法的詳細資訊。

    本文提及的協力廠商產品是由與 Microsoft 無關的獨立廠商所製造。Microsoft 不以默示或其他方式,提供與這些產品的效能或可靠性有關的擔保。
如何取得並安裝更新

方法 1:Windows Update

可透過 Windows Update 取得此更新。開啟自動更新時,會自動下載和安裝此更新。如需如何開啟自動更新的詳細資訊,請參閱 自動取得安全性更新 (英文)。

注意:若為 Windows RT 8.1,只能透過 Windows Update 取得此更新。

方法 2:Microsoft 下載中心

您可以透過 Microsoft 下載中心取得獨立更新套件。請依照下載頁面的安裝指示來安裝更新。

按一下 Microsoft 資訊安全公告 MS16-048 中與所執行的 Windows 版本對應的下載連結。

如何取得此安全性更新的說明及支援

安裝更新的說明:Microsoft Update 支援

IT 專業人員的資訊安全解決方案:TechNet 安全性疑難排解與支援

協助保護您的 Windows 電腦免於受到病毒和惡意程式碼攻擊:病毒解決方案與資訊安全中心

您所在國家/地區的當地支援:多語系支援
檔案資訊

檔案雜湊資訊

File nameSHA1 hashSHA256 hash
Windows8.1-KB3146723-x64.msu5AAE2A7642E87B2881D7337EF736EAEE679F907A7419BA7ECB7BCD962ECE7AEF269BEE633F6CBC4F4778D5F23CD3C7F7E8FC270F
Windows8.1-KB3146723-x86.msu5F3689532BF8969D68F21B7B3F82B111F8232F434FD9572130014B0AE6A075AC0DB772CEB350EBD385C867E4AB71642F39EC29EE
Windows8-RT-KB3146723-x64.msu682AE0931C3FA2AFA4E988B8FD08249F15E1D97706D3E3F90C3863E7A970757446DD87CC47C5EF7F08F406F9B49FF5C988158D86
Windows8-RT-KB3146723-x64_New58.msuB629DB9F3EBB85B40A61A1CC5DEA13C11A124B6CDB652213B70BA0D0CC19ADD967BA933465FE76FD0C74D785458CB8172461B6E0

檔案資訊

此軟體更新的英文 (美國) 版會安裝具有下表中所列屬性的檔案。

Windows 8.1 和 Windows Server 2012 R2 檔案資訊

注意事項
  • 套用至特定產品、里程碑 (RTM、SPn) 及服務分支 (LDR、GDR) 的檔案可透過檢視下列表格中所顯示的檔案版本號碼來確認:
    版本產品里程碑服務分支
    6.3.960 0.17xxxWindows RT 8.1、Windows 8.1 和 Windows Server 2012 R2RTMGDR
  • GDR 服務分支只包含針對普遍的嚴重問題所發行的通用修正程式。LDR 服務分支除了通用修正程式之外,還包含 Hotfix。
  • 不會列出已安裝的 MANIFEST 檔案 (.manifest) 及 MUM 檔案 (.mum)。
關於所有支援的 x64 版本
File nameFile versionFile sizeDateTimePlatformService branch
Chs_boot.ttfNot applicable3,695,65503-Mar-201619:28Not applicableNot applicable
Msyhn_boot.ttfNot applicable150,72703-Mar-201619:28Not applicableNot applicable
Msyh_boot.ttfNot applicable154,83303-Mar-201619:28Not applicableNot applicable
Cht_boot.ttfNot applicable3,878,34703-Mar-201619:28Not applicableNot applicable
Msjhn_boot.ttfNot applicable161,49103-Mar-201619:28Not applicableNot applicable
Msjh_boot.ttfNot applicable163,49803-Mar-201619:28Not applicableNot applicable
Segmono_boot.ttfNot applicable44,62303-Mar-201619:28Not applicableNot applicable
Segoen_slboot.ttfNot applicable85,69103-Mar-201619:28Not applicableNot applicable
Segoe_slboot.ttfNot applicable86,00703-Mar-201619:28Not applicableNot applicable
Wgl4_boot.ttfNot applicable49,02703-Mar-201619:28Not applicableNot applicable
Jpn_boot.ttfNot applicable1,985,80303-Mar-201619:28Not applicableNot applicable
Meiryon_boot.ttfNot applicable141,49103-Mar-201619:28Not applicableNot applicable
Meiryo_boot.ttfNot applicable143,10803-Mar-201619:28Not applicableNot applicable
Kor_boot.ttfNot applicable2,372,93503-Mar-201619:28Not applicableNot applicable
Malgunn_boot.ttfNot applicable174,36703-Mar-201619:28Not applicableNot applicable
Malgun_boot.ttfNot applicable176,81203-Mar-201619:28Not applicableNot applicable
Winload.efi6.3.9600.182581,663,19203-Mar-201619:27Not applicableNot applicable
Winload.exe6.3.9600.182581,523,21603-Mar-201619:27x64Not applicable
Winresume.efi6.3.9600.182581,490,12803-Mar-201619:27Not applicableNot applicable
Winresume.exe6.3.9600.182581,358,96003-Mar-201619:27x64Not applicable
Basesrv.dll6.3.9600.1825859,39203-Mar-201616:13x64Not applicable
Csrsrv.dll6.3.9600.1793359,39213-Jul-201519:46x64Not applicable
Ntdll.dll6.3.9600.182581,737,08803-Mar-201619:27x64Not applicable
Ntoskrnl.exe6.3.9600.182587,452,51203-Mar-201619:28x64Not applicable
Microsoft-windows-system-events.dll6.3.9600.18258246,78403-Mar-201618:29x64Not applicable
Krnlprov.dll6.3.9600.1825846,59203-Mar-201618:06x64Not applicable
Krnlprov.mofNot applicable14,84022-Aug-201306:51Not applicableNot applicable
Ntvdm64.dll6.3.9600.1814616,89621-Nov-201518:32x64AMD64_MICROSOFT-WINDOWS-WOW
Wow64.dll6.3.9600.17734285,18420-Mar-201504:10x64AMD64_MICROSOFT-WINDOWS-WOW
Wow64cpu.dll6.3.9600.1773413,31220-Mar-201504:10x64AMD64_MICROSOFT-WINDOWS-WOW
Ntdll.dll6.3.9600.182581,501,49603-Mar-201618:38x86Not applicable
Acwow64.dll6.3.9600.1773437,37620-Mar-201503:06x86WOW64_MICROSOFT-WINDOWS-WOW
Instnm.exe6.3.9600.174758,70429-Oct-201401:13x86WOW64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll6.3.9600.1814614,33621-Nov-201517:50x86WOW64_MICROSOFT-WINDOWS-WOW
Setup16.exe3.1.0.191825,60029-Oct-201401:13x86WOW64_MICROSOFT-WINDOWS-WOW
User.exe6.3.9600.174754,09629-Oct-201401:14x86WOW64_MICROSOFT-WINDOWS-WOW
Wow32.dll6.3.9600.174755,63229-Oct-201401:15x86WOW64_MICROSOFT-WINDOWS-WOW
關於所有支援的 x86 版本
File nameFile versionFile sizeDateTimePlatform
Chs_boot.ttfNot applicable3,695,65803-Mar-201618:43Not applicable
Msyhn_boot.ttfNot applicable150,73003-Mar-201618:43Not applicable
Msyh_boot.ttfNot applicable154,83103-Mar-201618:43Not applicable
Cht_boot.ttfNot applicable3,878,35003-Mar-201618:43Not applicable
Msjhn_boot.ttfNot applicable161,49503-Mar-201618:43Not applicable
Msjh_boot.ttfNot applicable163,49903-Mar-201618:43Not applicable
Segmono_boot.ttfNot applicable44,62303-Mar-201618:43Not applicable
Segoen_slboot.ttfNot applicable85,68803-Mar-201618:43Not applicable
Segoe_slboot.ttfNot applicable86,00703-Mar-201618:43Not applicable
Wgl4_boot.ttfNot applicable49,02403-Mar-201618:39Not applicable
Jpn_boot.ttfNot applicable1,985,80303-Mar-201618:43Not applicable
Meiryon_boot.ttfNot applicable141,49103-Mar-201618:43Not applicable
Meiryo_boot.ttfNot applicable143,11103-Mar-201618:43Not applicable
Kor_boot.ttfNot applicable2,372,93503-Mar-201618:43Not applicable
Malgunn_boot.ttfNot applicable174,36703-Mar-201618:43Not applicable
Malgun_boot.ttfNot applicable176,81503-Mar-201618:43Not applicable
Winload.efi6.3.9600.182581,396,69603-Mar-201618:38Not applicable
Winload.exe6.3.9600.182581,285,60803-Mar-201618:38x86
Winresume.efi6.3.9600.182581,272,19203-Mar-201618:38Not applicable
Winresume.exe6.3.9600.182581,172,00003-Mar-201618:38x86
Basesrv.dll6.3.9600.1825850,68803-Mar-201616:11x86
Csrsrv.dll6.3.9600.1793348,64013-Jul-201519:27x86
Ntdll.dll6.3.9600.182581,471,55203-Mar-201618:38x86
Ntoskrnl.exe6.3.9600.182585,764,44803-Mar-201618:43Not applicable
Microsoft-windows-system-events.dll6.3.9600.18258246,78403-Mar-201617:49x86
Krnlprov.dll6.3.9600.1825838,91203-Mar-201617:30x86
Krnlprov.mofNot applicable14,84021-Aug-201323:46Not applicable

Windows Server 2012 檔案資訊

注意事項
  • 套用至特定產品、里程碑 (RTM、SPn) 及服務分支 (LDR、GDR) 的檔案可透過檢視下列表格中所顯示的檔案版本號碼來確認:
    版本產品里程碑服務分支
    6.2.920 0.17xxxWindows 8、Windows RT 或 Windows Server 2012RTMGDR
    6.2.920 0.21xxxWindows 8、Windows RT 或 Windows Server 2012RTMLDR
  • GDR 服務分支只包含針對普遍的嚴重問題所發行的通用修正程式。LDR 服務分支除了通用修正程式之外,還包含 Hotfix。
  • 不會列出已安裝的 MANIFEST 檔案 (.manifest) 及 MUM 檔案 (.mum)。
關於所有支援的 x64 版本
File nameFile versionFile sizeDateTimePlatform
Basesrv.dll6.2.9200.2179354,27203-Mar-201621:48x64
關於所有支援的 x64 版本
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Advapi32.dll6.2.9200.21820895,48829-Mar-201621:47x64NoneNot applicable
Winload.efi6.2.9200.216381,405,40822-Sep-201521:46Not applicableNoneNot applicable
Winload.exe6.2.9200.216381,273,18422-Sep-201521:46x64NoneNot applicable
Winresume.efi6.2.9200.207261,217,35225-May-201300:17Not applicableNoneNot applicable
Winresume.exe6.2.9200.207261,093,90425-May-201300:17x64NoneNot applicable
Basesrv.dll6.2.9200.2182054,27229-Mar-201621:47x64NoneNot applicable
Csrsrv.dll6.2.9200.2154848,12811-Jul-201518:07x64NoneNot applicable
Ksecdd.sys6.2.9200.21473100,18402-May-201506:23x64NoneNot applicable
Lsass.exe6.2.9200.2052135,84020-Sep-201206:33x64NoneNot applicable
Sspicli.dll6.2.9200.21703164,35217-Nov-201508:00x64NoneNot applicable
Sspisrv.dll6.2.9200.2052127,64820-Sep-201206:32x64NoneNot applicable
Cng.sys6.2.9200.21637566,07222-Sep-201513:43x64NoneNot applicable
Ksecpkg.sys6.2.9200.21703171,35217-Nov-201509:52x64NoneNot applicable
Lsasrv.dll6.2.9200.218201,280,00029-Mar-201621:48x64NoneNot applicable
Adtschema.dll6.2.9200.21289719,36010-Nov-201404:43x64NoneNot applicable
Msaudite.dll6.2.9200.21269146,94411-Oct-201405:38x64NoneNot applicable
Msobjs.dll6.2.9200.1638461,95226-Jul-201202:36x64NoneNot applicable
Ntdll.dll6.2.9200.218201,821,70430-Mar-201601:32x64NoneNot applicable
Ocspsvcctrs.iniNot applicable2,96026-Jul-201205:07Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,13426-Jul-201208:00Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,91826-Jul-201204:43Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,21026-Jul-201207:59Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,09826-Jul-201208:00Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02826-Jul-201207:59Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,14026-Jul-201205:21Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,64226-Jul-201208:11Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,57626-Jul-201205:20Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02626-Jul-201207:36Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02826-Jul-201207:48Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,18826-Jul-201205:30Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,12626-Jul-201205:08Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,06426-Jul-201207:49Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,09226-Jul-201207:52Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,82826-Jul-201205:12Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,46426-Jul-201208:05Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,48026-Jul-201205:13Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,46026-Jul-201208:11Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvc.exe6.2.9200.21345272,38415-Jan-201505:27x64SPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.hNot applicable1,56902-Jun-201214:34Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,91802-Jun-201214:34Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ntoskrnl.exe6.2.9200.218216,938,46430-Mar-201601:34x64NoneNot applicable
Credssp.dll6.2.9200.2170320,48017-Nov-201507:59x64SP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.dll6.2.9200.2170394,72017-Nov-201508:01x64SP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.mofNot applicable96402-Jun-201214:33Not applicableSP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Wdigest.dll6.2.9200.21703208,89617-Nov-201508:01x64NoneNot applicable
Kerberos.dll6.2.9200.21820830,46429-Mar-201621:48x64NoneNot applicable
Msv1_0.dll6.2.9200.21820317,95229-Mar-201621:48x64NoneNot applicable
Shcore.dll6.2.9200.21703590,84817-Nov-201508:00x64NoneNot applicable
Mrxsmb10.sys6.2.9200.21529281,60025-Jun-201518:52x64NoneNot applicable
Mrxsmb20.sys6.2.9200.21548205,31211-Jul-201517:07x64NoneNot applicable
Mrxsmb.sys6.2.9200.21342396,80006-Jan-201523:17x64NoneNot applicable
Lsm.dll6.2.9200.21703439,80817-Nov-201508:00x64NoneNot applicable
Workerdd.dll6.2.9200.2101214,84812-Apr-201406:58x64NoneNot applicable
Usercpl.dll6.2.9200.217031,043,96817-Nov-201508:01x64NoneNot applicable
Usercpl.ptxmlNot applicable78911-Oct-201200:40Not applicableNoneNot applicable
Winlogon.exe6.2.9200.21703578,04817-Nov-201508:01x64NoneNot applicable
Sspicli.dll6.2.9200.2098499,84010-Mar-201401:34x86NoneNot applicable
Ntdll.dll6.2.9200.218211,413,12030-Mar-201600:14x86NoneNot applicable
Wdigest.dll6.2.9200.21703176,64017-Nov-201508:09x86NoneNot applicable
Kerberos.dll6.2.9200.21821666,62429-Mar-201623:58x86NoneNot applicable
Msv1_0.dll6.2.9200.21821274,94429-Mar-201623:58x86NoneNot applicable
Advapi32.dll6.2.9200.21821704,00029-Mar-201623:57x86NoneNot applicable
Adtschema.dll6.2.9200.21289719,36010-Nov-201403:40x86NoneNot applicable
Msaudite.dll6.2.9200.21269146,94411-Oct-201404:35x86NoneNot applicable
Msobjs.dll6.2.9200.1638461,95226-Jul-201202:47x86NoneNot applicable
Credssp.dll6.2.9200.2170317,40817-Nov-201508:08x86SP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.dll6.2.9200.2170376,80017-Nov-201508:09x86SP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.mofNot applicable96402-Jun-201214:33Not applicableSP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Shcore.dll6.2.9200.21703460,80017-Nov-201508:09x86NoneNot applicable
Usercpl.dll6.2.9200.21703961,53617-Nov-201508:09x86NoneNot applicable
Usercpl.ptxmlNot applicable78911-Oct-201200:42Not applicableNoneNot applicable
malicious attacker exploit
內容

文章識別碼:3146723 - 最後檢閱時間:04/28/2016 13:19:00 - 修訂: 5.0

Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard, Windows Server 2012 R2 Essentials, Windows Server 2012 R2 Foundation, Windows 8.1 Enterprise, Windows 8.1 Pro, Windows 8.1, Windows RT 8.1, Windows Server 2012 Datacenter, Windows Server 2012 Standard, Windows Server 2012 Essentials, Windows Server 2012 Foundation

  • atdownload kbbug kbexpertiseinter kbfix kbsecbulletin kbsecurity kbsecvulnerability KB3146723
意見反應