MS16-094:說明安全開機的安全性更新:2016 年 7 月 12 日

結論
此安全性更新可解決 Microsoft Windows 中的弱點,如果攻擊者在目標裝置上安裝受影響的原則,這些弱點可能會允許安全開機的安全功能略過。攻擊者必須擁有系統管理權限或實際存取權,以安裝原則和略過安全開機。

若要深入了解這項弱點,請參閱 Microsoft 資訊安全公告 MS16-094
其他相關資訊
重要說明

  • Windows RT 8.1、Windows 8.1 和 Windows Server 2012 R2 未來所有的安全性與非安全性更新皆需要安裝更新 2919355(英文)。我們建議您在 Windows RT 8.1、Windows 8.1 或 Windows Server 2012 R2 電腦上安裝更新 2919355(英文),以便收到未來的更新。
  • 如果您在安裝此更新之後安裝語言套件,您必須重新安裝此更新。因此,我們建議您在安裝此更新前,先安裝任何需要的語言套件。如需詳細資訊,請參閱將語言套件新增到 Windows
如何取得並安裝更新

方法 1:Windows Update

可透過 Windows Update 取得此更新。開啟自動更新後,就會自動下載並安裝此更新。如需如何開啟自動更新的詳細資訊,請參閱自動取得安全性更新(英文)。

注意 若為 Windows RT 8.1,只能透過 Windows Update 取得此更新。

方法 2:Microsoft 下載中心

您可以透過 Microsoft 下載中心取得獨立更新套件。請依照下載頁面的安裝指示來安裝更新。

按一下 Microsoft 資訊安全公告 MS16-094 中與所執行的 Windows 版本對應的下載連結。
其他相關資訊

如何取得此安全性更新的說明及支援

有關安裝更新的說明:Microsoft Update 支援

適用於 IT 專業人員的資訊安全解決方案:TechNet 安全性疑難排解與支援(英文)

保護您的 Windows 電腦免於受到病毒和惡意程式碼攻擊:病毒解決方案與資訊安全中心

您所在國家/地區的當地支援:國際化支援
檔案資訊

檔案雜湊資訊

File namePackage hash SHA1Package hash SHA2
Windows8.1-KB3172727-x86.msu9B3A9404F262B22ADA0434E5432CDDDCCA344E91BFC8B9D4B8298D691931E4EA2C876D0B394DFDE0A781CC4EAE2392A44318C747
Windows8.1-KB3172727-x64.msu881DFB1EE768A4DFCAAA6DFE67A9A59072577349BC424D3016EB7DE18D9F96717BBCB91F260E64938AAB5D36893CEC15268C0031
Windows8-RT-KB3172727-x64.msuB2BBDE1BCBCAE514A5149618B8AA401A3022FBB36AA77FE04F7EC823AB0EB16079E06936FFB713FCB0C2205F4C5287BDEC1BC1AD

檔案資訊

此軟體更新的英文 (美國) 版會安裝具有下表中所列屬性的檔案。

Windows 8.1 和 Windows Server 2012 R2 檔案資訊

注意

  • 套用至特定產品、里程碑 (RTM, SPn) 及服務分支 (LDR, GDR) 的檔案可透過檢視下列表格中所顯示的檔案版本號碼來確認:
    版本產品里程碑服務分支
    6.3.960 0.16xxxWindows RT 8.1、Windows 8.1 和 Windows Server 2012 R2RTMGDR
    6.3.960 0.17xxxWindows RT 8.1、Windows 8.1 和 Windows Server 2012 R2RTMGDR
    6.3.960 0.18xxxWindows RT 8.1、Windows 8.1 和 Windows Server 2012 R2RTMGDR
  • GDR 服務分支只包含針對普遍的嚴重問題所發行的通用修正程式。LDR 服務分支除了通用修正程式之外,還包含 Hotfix。
  • 不會列出已安裝的 MANIFEST 檔案 (.manifest) 及 MUM 檔案 (.mum)。
適用於所有支援的 x86 版本
File nameFile versionFile sizeDateTimePlatform
Boot.stlNot applicable4,66924-Jun-201613:35Not applicable
Ci.dll6.3.9600.17550485,54408-Dec-201419:46x86
Driver.stlNot applicable4,53824-Jun-201613:35Not applicable
適用於所有支援的 x64 版本
File nameFile versionFile sizeDateTimePlatform
Boot.stlNot applicable4,66924-Jun-201613:46Not applicable
Ci.dll6.3.9600.17550531,61608-Dec-201419:42x64
Driver.stlNot applicable4,65224-Jun-201613:46Not applicable

Windows Server 2012 檔案資訊

注意
  • 套用至特定產品、里程碑 (RTM, SPn) 及服務分支 (LDR, GDR) 的檔案可透過檢視下列表格中所顯示的檔案版本號碼來確認:
    版本 產品 里程碑 服務分支
    6.2.920 0.17xxxWindows 8、Windows RT 或 Windows Server 2012RTMGDR
    6.2.920 0.21xxxWindows 8、Windows RT 或 Windows Server 2012RTMLDR
  • GDR 服務分支只包含針對普遍的嚴重問題所發行的通用修正程式。LDR 服務分支除了通用修正程式之外,還包含 Hotfix。
  • 不會列出已安裝的 MANIFEST 檔案 (.manifest) 及 MUM 檔案 (.mum)。
適用於所有支援的 x64 版本
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Winload.efi6.2.9200.216381,405,40822-Sep-201521:46Not applicableNoneNot applicable
Winload.exe6.2.9200.216381,273,18422-Sep-201521:46x64NoneNot applicable
Winresume.efi6.2.9200.207261,217,35225-May-201300:17Not applicableNoneNot applicable
Winresume.exe6.2.9200.207261,093,90425-May-201300:17x64NoneNot applicable
Boot.stlNot applicable4,62924-Jun-201613:10Not applicableNoneNot applicable
Ci.dll6.2.9200.20679503,08004-Apr-201322:04x64NoneNot applicable
Driver.stlNot applicable4,36724-Jun-201613:10Not applicableNoneNot applicable
Ksecdd.sys6.2.9200.21473100,18402-May-201506:23x64NoneNot applicable
Lsass.exe6.2.9200.2052135,84020-Sep-201206:33x64NoneNot applicable
Sspicli.dll6.2.9200.21703164,35217-Nov-201508:00x64NoneNot applicable
Sspisrv.dll6.2.9200.2052127,64820-Sep-201206:32x64NoneNot applicable
Cng.sys6.2.9200.21637566,07222-Sep-201513:43x64NoneNot applicable
Ksecpkg.sys6.2.9200.21858171,36010-May-201619:18x64NoneNot applicable
Lsasrv.dll6.2.9200.218301,280,00009-Apr-201616:01x64NoneNot applicable
Adtschema.dll6.2.9200.21289719,36010-Nov-201404:43x64NoneNot applicable
Msaudite.dll6.2.9200.21269146,94411-Oct-201405:38x64NoneNot applicable
Msobjs.dll6.2.9200.1638461,95226-Jul-201202:36x64NoneNot applicable
Ocspsvcctrs.iniNot applicable2,96026-Jul-201205:07Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,13426-Jul-201208:00Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,91826-Jul-201204:43Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,21026-Jul-201207:59Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,09826-Jul-201208:00Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02826-Jul-201207:59Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,14026-Jul-201205:21Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,64226-Jul-201208:11Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,57626-Jul-201205:20Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02626-Jul-201207:36Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02826-Jul-201207:48Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,18826-Jul-201205:30Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,12626-Jul-201205:08Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,06426-Jul-201207:49Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,09226-Jul-201207:52Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,82826-Jul-201205:12Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,46426-Jul-201208:05Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,48026-Jul-201205:13Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,46026-Jul-201208:11Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvc.exe6.2.9200.21345272,38415-Jan-201505:27x64SPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.hNot applicable1,56902-Jun-201214:34Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,91802-Jun-201214:34Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ntoskrnl.exe6.2.9200.219146,937,95201-Jul-201616:27x64NoneNot applicable
Credssp.dll6.2.9200.2170320,48017-Nov-201507:59x64SP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.dll6.2.9200.2170394,72017-Nov-201508:01x64SP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.mofNot applicable96402-Jun-201214:33Not applicableSP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Wdigest.dll6.2.9200.21858208,89610-May-201617:07x64NoneNot applicable
Kerberos.dll6.2.9200.21830829,95209-Apr-201616:01x64NoneNot applicable
Msv1_0.dll6.2.9200.21830317,95209-Apr-201616:01x64NoneNot applicable
Shcore.dll6.2.9200.21703590,84817-Nov-201508:00x64NoneNot applicable
Mrxsmb10.sys6.2.9200.21529281,60025-Jun-201518:52x64NoneNot applicable
Mrxsmb20.sys6.2.9200.21548205,31211-Jul-201517:07x64NoneNot applicable
Mrxsmb.sys6.2.9200.21342396,80006-Jan-201523:17x64NoneNot applicable
Lsm.dll6.2.9200.21703439,80817-Nov-201508:00x64NoneNot applicable
Workerdd.dll6.2.9200.2101214,84812-Apr-201406:58x64NoneNot applicable
Usercpl.dll6.2.9200.217031,043,96817-Nov-201508:01x64NoneNot applicable
Usercpl.ptxmlNot applicable78911-Oct-201200:40Not applicableNoneNot applicable
Winlogon.exe6.2.9200.21703578,04817-Nov-201508:01x64NoneNot applicable
Sspicli.dll6.2.9200.2098499,84010-Mar-201401:34x86NoneNot applicable
Wdigest.dll6.2.9200.21858176,64010-May-201617:55x86NoneNot applicable
Kerberos.dll6.2.9200.21830666,11209-Apr-201616:48x86NoneNot applicable
Msv1_0.dll6.2.9200.21830274,94409-Apr-201616:48x86NoneNot applicable
Adtschema.dll6.2.9200.21289719,36010-Nov-201403:40x86NoneNot applicable
Msaudite.dll6.2.9200.21269146,94411-Oct-201404:35x86NoneNot applicable
Msobjs.dll6.2.9200.1638461,95226-Jul-201202:47x86NoneNot applicable
Credssp.dll6.2.9200.2170317,40817-Nov-201508:08x86SP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.dll6.2.9200.2170376,80017-Nov-201508:09x86SP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.mofNot applicable96402-Jun-201214:33Not applicableSP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Shcore.dll6.2.9200.21703460,80017-Nov-201508:09x86NoneNot applicable
Usercpl.dll6.2.9200.21703961,53617-Nov-201508:09x86NoneNot applicable
Usercpl.ptxmlNot applicable78911-Oct-201200:42Not applicableNoneNot applicable
惡意攻擊者入侵程式
內容

文章識別碼:3172727 - 最後檢閱時間:07/15/2016 14:14:00 - 修訂: 3.0

  • atdownload kbbug kbexpertiseinter kbfix kbsecbulletin kbsecurity kbsecvulnerability KB3172727
意見反應