MS16-110:說明 Windows 的安全性更新:2016 年 9 月 13 日

結論
若要深入了解該弱點,請參閱 Microsoft 資訊安全公告 MS16-110
其他相關資訊
重要

  • Windows RT 8.1、Windows 8.1 和 Windows Server 2012 R2 未來所有的安全性與非安全性更新皆需要已安裝更新 2919355。我們建議您在 Windows RT 8.1、Windows 8.1 或 Windows Server 2012 R2 電腦上安裝更新 2919355,以便收到未來的更新。
  • 如果您在安裝此更新之後安裝語言套件,您必須重新安裝此更新。因此,我們建議您在安裝此更新前,先安裝任何需要的語言套件。如需詳細資訊,請參閱將語言套件新增到 Windows
其他相關資訊

此安全性更新的已知問題

  • 已知問題 1

    症狀

    請試想下列案例:
    • 您嘗試透過某個應用程式 (例如 [檔案總管]) 使用 SMBv1 通訊協定來存取檔案伺服器。 
    • 該應用程式針對 WNetAddConnection API 使用 CONNECT_INTERACTIVE 標幟。 
    • 您使用的電腦已透過 Microsoft 帳戶認證登入。
    • [認證管理員] 中沒有您用來存取檔案伺服器共用的網路認證。
    • 此電腦上的防火牆設定檔已設為 [公用]。 
       
    在此案例中,您收到下列錯誤訊息:

    指定的登入工作階段不存在。其可能已遭終止。

    如果您已安裝安全性更新 3187754,就可能會發生此問題。 

    因應措施

    若要解決此問題,請使用下列任一選項:
    • 選項 1:請視情況使用 SMBv2,而非 SMBv1。
    •  選項 2:利用以下 net use cmd 明確傳遞認證: 
      net use \\<serverName>\<shareName> /user: <DomainName\UserName> <Password>
    •  選項 3:若為私人家用網路,請將網路設定檔變更為 [私人],而非 [公用]
    • 選項 4:在 [認證管理員] 中為信任的網路共用儲存認證。
  • 已知問題 2

    安裝此更新後,可能會發生 0xC0000022 NTLM 驗證錯誤。若要解決此問題,請參閱套用更新後,Windows Server 2012、Windows 8.1 和 Windows Server 2012 R2 出現 0xC0000022 錯誤,導致 NTLM 驗證失敗
如何取得並安裝更新

方法 1:Windows Update

可透過 Windows Update 取得此更新。開啟自動更新時,會自動下載和安裝此更新。如需如何開啟自動更新的詳細資訊,請參閱自動取得安全性更新

注意若為 Windows RT 8.1,只能透過 Windows Update 取得此更新。

方法 2:Microsoft Update Catalog

若要取得此更新的獨立套件,請前往 Microsoft Update Catalog 網站。

方法 3:Microsoft 下載中心

您可以透過 Microsoft 下載中心取得獨立更新套件。請依照下載頁面的安裝指示來安裝更新。

按一下 Microsoft 資訊安全公告 MS16-110 中與所執行的 Windows 版本對應的下載連結。
其他相關資訊

如何取得此安全性更新的說明及支援

安裝更新的說明:Microsoft Update 支援

適用於 IT 專業人員的資訊安全解決方案:TechNet 安全性疑難排解與支援

保護您的 Windows 電腦免於受到病毒和惡意程式碼攻擊:病毒解決方案與資訊安全中心

您所在國家/地區的當地支援:多語系支援
檔案資訊

檔案雜湊資訊

File nameSHA1 hashSHA256 hash
Windows8.1-KB3187754-v2-x86.msu1CCFA4C4B732DAC305264A78704A49D01F62BEB7C9E6933821256C432F935415A970936E7211B1C4A0ED193ACBA728F5B39B18B2
Windows8.1-KB3187754-v2-x64.msuC366213D75966AEA5D86070919F0B715F7DD7856DA37F953F1FA8B6B6EA86177A215E11A8242BD2D912DF6CD56FB3ED67FC026FE
Windows8-RT-KB3187754-v2-x64.msuFC856F0C6DFFD0C177B1D56A38E399DDF61CF16090786E1403D8E1D36672E8968E1BDC93E2DCF604F8264B2C1A7B636184B4B961

檔案資訊

此軟體更新的英文 (美國) 版會安裝具有下表中所列屬性的檔案。

Windows 8.1 和 Windows Server 2012 R2 檔案資訊

注意
  • 套用至特定產品、里程碑 (RTM、SPn) 及服務分支 (LDR、GDR) 的檔案可透過檢視下列表格中所顯示的檔案版本號碼來確認:
    版本產品里程碑服務分支
    6.3.960 0.16 xxxWindows 8.1、Windows RT 8.1 和 Windows Server 2012 R2RTMGDR
    6.3.960 0.17 xxxWindows 8.1、Windows RT 8.1 和 Windows Server 2012 R2RTMGDR
    6.3.960 0.18 xxxWindows 8.1、Windows RT 8.1 和 Windows Server 2012 R2RTMGDR
  • GDR 服務分支只包含針對普遍的嚴重問題所發行的通用修正程式。LDR 服務分支除了通用修正程式之外,還包含 Hotfix。
  • 不會列出已安裝的 MANIFEST 檔案 (.manifest) 及 MUM 檔案 (.mum)。
適用於所有支援的 x86 版本
File nameFile versionFile sizeDateTimePlatform
Bcryptprimitives.dll6.3.9600.18340340,87216-May-201621:13x86
Ksecdd.sys6.3.9600.1845477,65622-Aug-201616:09x86
Lsass.exe6.3.9600.1741535,61629-Oct-201403:05x86
Sspicli.dll6.3.9600.18454136,87222-Aug-201616:09x86
Sspisrv.dll6.3.9600.1741518,43229-Oct-201402:03x86
Cng.sys6.3.9600.18340479,31216-May-201621:16x86
Ksecpkg.sys6.3.9600.18340148,82416-May-201621:16x86
Lsasrv.dll6.3.9600.184541,118,72020-Aug-201622:51x86
Adtschema.dll6.3.9600.17415736,76829-Oct-201402:06x86
Msaudite.dll6.3.9600.17415154,11229-Oct-201402:06x86
Msobjs.dll6.3.9600.1638461,95222-Aug-201304:17x86
Msv1_0.dll6.3.9600.18468332,63208-Sep-201621:51x86
Mrxsmb10.sys6.3.9600.18454229,88820-Aug-201623:59x86
Mrxsmb20.sys6.3.9600.18454153,08821-Aug-201600:01x86
Mrxsmb.sys6.3.9600.18454328,19221-Aug-201600:00x86
適用於所有支援的 x64 版本
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Bcryptprimitives.dll6.3.9600.18344397,23218-May-201623:18x64NoneNot applicable
Certcli.dll6.3.9600.18454445,44021-Aug-201600:17x64NoneNot applicable
Ksecdd.sys6.3.9600.18454100,18422-Aug-201616:06x64NoneNot applicable
Lsass.exe6.3.9600.1741547,02429-Oct-201403:51x64NoneNot applicable
Sspicli.dll6.3.9600.18454179,24822-Aug-201616:06x64NoneNot applicable
Sspisrv.dll6.3.9600.1741529,18429-Oct-201402:48x64NoneNot applicable
Cng.sys6.3.9600.18344563,02418-May-201623:18x64NoneNot applicable
Ksecpkg.sys6.3.9600.18344178,01618-May-201623:16x64NoneNot applicable
Lsasrv.dll6.3.9600.184541,445,37620-Aug-201623:27x64NoneNot applicable
Adtschema.dll6.3.9600.17415736,76829-Oct-201402:50x64NoneNot applicable
Msaudite.dll6.3.9600.17415154,11229-Oct-201402:51x64NoneNot applicable
Msobjs.dll6.3.9600.1638461,95222-Aug-201311:46x64NoneNot applicable
Ocspisapi.dll6.3.9600.17415293,37629-Oct-201401:43x64SPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspisapictrs.hNot applicable1,42118-Jun-201315:06Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspisapictrs.iniNot applicable2,63618-Jun-201315:06Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,96022-Aug-201319:26Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,13422-Aug-201319:44Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,91822-Aug-201312:30Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,21022-Aug-201319:43Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,09822-Aug-201319:30Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02822-Aug-201319:46Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,14022-Aug-201319:31Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,64222-Aug-201319:30Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,57622-Aug-201319:31Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02622-Aug-201319:23Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02822-Aug-201319:23Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,18822-Aug-201319:23Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,12622-Aug-201319:33Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,06422-Aug-201319:36Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,09222-Aug-201319:36Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,82822-Aug-201319:32Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,46422-Aug-201319:20Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,48022-Aug-201319:20Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,46022-Aug-201319:21Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvc.exe6.3.9600.17415219,13629-Oct-201402:19x64SPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.hNot applicable1,56918-Jun-201315:06Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,91818-Jun-201315:06Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Msv1_0.dll6.3.9600.18468443,22408-Sep-201621:51x64NoneNot applicable
Mrxsmb10.sys6.3.9600.18454284,67221-Aug-201601:01x64NoneNot applicable
Mrxsmb20.sys6.3.9600.18454201,72821-Aug-201601:03x64NoneNot applicable
Mrxsmb.sys6.3.9600.18454401,40821-Aug-201601:01x64NoneNot applicable
Sspicli.dll6.3.9600.18454104,96020-Aug-201622:55x86NoneNot applicable
Msv1_0.dll6.3.9600.18468332,63208-Sep-201621:51x86NoneNot applicable
Bcryptprimitives.dll6.3.9600.18344340,88018-May-201622:28x86NoneNot applicable
Certcli.dll6.3.9600.18454324,09620-Aug-201623:26x86NoneNot applicable
Adtschema.dll6.3.9600.17415736,76829-Oct-201402:06x86NoneNot applicable
Msaudite.dll6.3.9600.17415154,11229-Oct-201402:06x86NoneNot applicable
Msobjs.dll6.3.9600.1638461,95222-Aug-201304:17x86NoneNot applicable

Windows Server 2012 檔案資訊

注意
  • 套用至特定產品、里程碑 (RTM、SPn) 及服務分支 (LDR、GDR) 的檔案可透過檢視下列表格中所顯示的檔案版本號碼來確認:
    版本 產品 里程碑 服務分支
    6.2.920 0.17xxxWindows 8、Windows RT 或 Windows Server 2012RTMGDR
    6.2.920 0.21xxxWindows 8、Windows RT 或 Windows Server 2012RTMLDR
  • GDR 服務分支只包含針對普遍的嚴重問題所發行的通用修正程式。LDR 服務分支除了通用修正程式之外,還包含 Hotfix。
  • 不會列出已安裝的 MANIFEST 檔案 (.manifest) 及 MUM 檔案 (.mum)。
適用於所有支援的 x64 版本
File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Ksecdd.sys6.2.9200.21473100,18402-May-201506:23x64NoneNot applicable
Lsass.exe6.2.9200.2052135,84020-Sep-201206:33x64NoneNot applicable
Sspicli.dll6.2.9200.21703164,35217-Nov-201508:00x64NoneNot applicable
Sspisrv.dll6.2.9200.2052127,64820-Sep-201206:32x64NoneNot applicable
Cng.sys6.2.9200.21637566,07222-Sep-201513:43x64NoneNot applicable
Ksecpkg.sys6.2.9200.21858171,36010-May-201619:18x64NoneNot applicable
Lsasrv.dll6.2.9200.219711,281,53608-Sep-201600:11x64NoneNot applicable
Adtschema.dll6.2.9200.21289719,36010-Nov-201404:43x64NoneNot applicable
Msaudite.dll6.2.9200.21269146,94411-Oct-201405:38x64NoneNot applicable
Msobjs.dll6.2.9200.1638461,95226-Jul-201202:36x64NoneNot applicable
Ocspsvcctrs.iniNot applicable2,96026-Jul-201205:07Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,13426-Jul-201208:00Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,91826-Jul-201204:43Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,21026-Jul-201207:59Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,09826-Jul-201208:00Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02826-Jul-201207:59Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,14026-Jul-201205:21Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,64226-Jul-201208:11Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,57626-Jul-201205:20Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02626-Jul-201207:36Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,02826-Jul-201207:48Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,18826-Jul-201205:30Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,12626-Jul-201205:08Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,06426-Jul-201207:49Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable3,09226-Jul-201207:52Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,82826-Jul-201205:12Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,46426-Jul-201208:05Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,48026-Jul-201205:13Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,46026-Jul-201208:11Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvc.exe6.2.9200.21954272,38420-Aug-201622:26x64SPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.hNot applicable1,56902-Jun-201214:34Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Ocspsvcctrs.iniNot applicable2,91802-Jun-201214:34Not applicableSPSAMD64_MICROSOFT-WINDOWS-OCSP
Credssp.dll6.2.9200.2170320,48017-Nov-201507:59x64SP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.dll6.2.9200.2170394,72017-Nov-201508:01x64SP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.mofNot applicable96402-Jun-201214:33Not applicableSP_AMD64_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Wdigest.dll6.2.9200.21858208,89610-May-201617:07x64NoneNot applicable
Kerberos.dll6.2.9200.21830829,95209-Apr-201616:01x64NoneNot applicable
Msv1_0.dll6.2.9200.21976317,95208-Sep-201600:12x64NoneNot applicable
Shcore.dll6.2.9200.21954590,84820-Aug-201622:25x64NoneNot applicable
Mrxsmb10.sys6.2.9200.21529281,60025-Jun-201518:52x64NoneNot applicable
Mrxsmb20.sys6.2.9200.21548205,31211-Jul-201517:07x64NoneNot applicable
Mrxsmb.sys6.2.9200.21342396,80006-Jan-201523:17x64NoneNot applicable
Lsm.dll6.2.9200.21703439,80817-Nov-201508:00x64NoneNot applicable
Workerdd.dll6.2.9200.2101214,84812-Apr-201406:58x64NoneNot applicable
Usercpl.dll6.2.9200.219541,043,96820-Aug-201622:25x64NoneNot applicable
Usercpl.ptxmlNot applicable78911-Oct-201200:40Not applicableNoneNot applicable
Winlogon.exe6.2.9200.21703578,04817-Nov-201508:01x64NoneNot applicable
Sspicli.dll6.2.9200.2098499,84010-Mar-201401:34x86NoneNot applicable
Wdigest.dll6.2.9200.21858176,64010-May-201617:55x86NoneNot applicable
Kerberos.dll6.2.9200.21830666,11209-Apr-201616:48x86NoneNot applicable
Msv1_0.dll6.2.9200.21976275,45608-Sep-201600:35x86NoneNot applicable
Adtschema.dll6.2.9200.21289719,36010-Nov-201403:40x86NoneNot applicable
Msaudite.dll6.2.9200.21269146,94411-Oct-201404:35x86NoneNot applicable
Msobjs.dll6.2.9200.1638461,95226-Jul-201202:47x86NoneNot applicable
Credssp.dll6.2.9200.2170317,40817-Nov-201508:08x86SP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.dll6.2.9200.2170376,80017-Nov-201508:09x86SP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Tspkg.mofNot applicable96402-Jun-201214:33Not applicableSP_X86_MICROSOFT-WINDOWS-SECURITY-CREDSSP
Shcore.dll6.2.9200.21954460,80020-Aug-201622:45x86NoneNot applicable
Usercpl.dll6.2.9200.21954961,53620-Aug-201622:45x86NoneNot applicable
Usercpl.ptxmlNot applicable78911-Oct-201200:42Not applicableNoneNot applicable
惡意攻擊程式利用
內容

文章識別碼:3187754 - 最後檢閱時間:10/07/2016 07:36:00 - 修訂: 4.0

Windows Server 2012 R2 Datacenter, Windows Server 2012 R2 Standard, Windows Server 2012 R2 Essentials, Windows Server 2012 R2 Foundation, Windows 8.1 Enterprise, Windows 8.1 Pro, Windows 8.1, Windows RT 8.1, Windows Server 2012 Datacenter, Windows Server 2012 Standard, Windows Server 2012 Essentials, Windows Server 2012 Foundation, Windows Server 2008 R2 Service Pack 1, Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows Vista Service Pack 2

  • atdownload kbbug kbexpertiseinter kbfix kbsecbulletin kbsecurity kbsecvulnerability KB3187754
意見反應