MS14-044: Description of the security update for SQL Server 2014 (GDR): August 12, 2014

Introduction

A security issue has been identified in Microsoft SQL Server 2014 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

Summary

Microsoft has released security bulletin MS14-044. To learn more about this security bulletin:

• Home users:
  <https://www.microsoft.com/security/pc-security/updates.aspx&gt;Skip the details: Download the updates for your home computer or laptop from the Microsoft Update website now:<https://update.microsoft.com/microsoftupdate/&gt;
• IT professionals:
  https://technet.microsoft.com/library/security/MS14-044

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Support and Troubleshooting

Help protect your Windows-based computer from viruses and malware: Virus and Security Solution Center

Local support according to your country:
International Support

More Information

Known issues with this security update

• If you install Cumulative Update 1 (CU1) or CU2 for SQL Server 2014 after you install this security update, the patch for Master Data Services will be removed, and Master Data Services will be vulnerable again. To correct that, you must reinstall the QFE package from this article (security update 2977315) or any cumulative update build whose version is later than 12.0.2381.0.

Removal information

To remove this software update for MDS, follow these steps:

1. Back up the MDS database.
2. Remove the MDS component.
3. Reinstall the MDS component.
4. Apply any necessary SQL Server service packs or service updates to bring MDS to its pre-security update version.

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in theDate and Time item in Control Panel.

__

x64-based versions

SQL Server 2014 Master Data Services

File name	File version	File size	Date	Time	Platform
Sql_mds_keyfile.dll	2014.120.2254.0	56984	25-Jul-2014	19:26	x64
Microsoft.MasterDataServices.WebUI.dll	12.0.2000.8	189632	20-Feb-2014	22:27	x86
SQL Server 2014 Database Services Common Core

File name	File version	File size	Date	Time	Platform
Sql_common_core_keyfile.dll	2014.120.2254.0	56984	26-Jul-2014	03:26	x64
SQL Server 2014 Database Services Core Instance

File name	File version	File size	Date	Time	Platform
Sql_engine_core_inst_keyfile.dll	2014.120.2254.0	56984	26-Jul-2014	03:26	x64
Sqlaccess.dll	2014.120.2254.0	469160	26-Jul-2014	03:25	x64
Sqlagent.exe	2014.120.2254.0	613032	26-Jul-2014	03:25	x64
Sqldk.dll	2014.120.2254.0	2397864	26-Jul-2014	03:18	x64
Sqllang.dll	2014.120.2254.0	35901608	26-Jul-2014	03:18	x64
Sqlmin.dll	2014.120.2254.0	64582304	26-Jul-2014	03:18	x64
Sqlos.dll	2014.120.2254.0	26792	26-Jul-2014	03:18	x64
Sqlservr.exe	2014.120.2254.0	370336	26-Jul-2014	03:25	x64
Sqltses.dll	2014.120.2254.0	8972968	26-Jul-2014	03:18	x64
SQL Server 2014 Integration Services

File name	File version	File size	Date	Time	Platform
Msdtssrvr.exe	12.0.2254.0	216736	26-Jul-2014	03:27	x64
Sql_is_keyfile.dll	2014.120.2254.0	56984	26-Jul-2014	03:26	x64
SQL Server 2014 Reporting Services

File name	File version	File size	Date	Time	Platform
Microsoft.reportingservices.diagnostics.dll.deploy	12.0.2254.0	1413280	26-Jul-2014	03:28	x86
Microsoft.reportingservices.diagnostics.dll	12.0.2254.0	1413280	26-Jul-2014	03:29	x86
Reportingservicesnativeclient.dll	2014.120.2254.0	105128	26-Jul-2014	03:24	x64
Reportingservicesnativeclient.dll	2014.120.2254.0	110248	26-Jul-2014	03:29	x86
Reportingservicesnativeserver.dll	2014.120.2254.0	100520	26-Jul-2014	03:25	x64
Sql_rs_keyfile.dll	2014.120.2254.0	56984	26-Jul-2014	03:26	x64
SQL Server 2014 Management Studio

File name	File version	File size	Date	Time	Platform
Microsoft.reportingservices.diagnostics.dll	12.0.2254.0	1413280	26-Jul-2014	03:28	x86
Microsoft.sqlserver.management.sqlstudio.dll	12.0.2254.0	317600	26-Jul-2014	03:29	x86
Reportingservicesnativeclient.dll	2014.120.2254.0	110248	26-Jul-2014	03:29	x86
Sql_ssms_keyfile.dll	2014.120.2254.0	56984	26-Jul-2014	03:26	x64