Lucene search

K
mskbMicrosoftKB3114889
HistoryMay 08, 2018 - 7:00 a.m.

Description of the security update for Project Server 2010: May 8, 2018

2018-05-0807:00:00
Microsoft
support.microsoft.com
44

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.005

Percentile

75.7%

Description of the security update for Project Server 2010: May 8, 2018

Summary

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2018-8156.

Note To apply this security update, you must have the release version of Service Pack 2 for Microsoft Project Server 2010 installed on the computer.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More Information

Security update deployment information

For deployment information about this update, see security update deployment information: May 8, 2018.

Security update replacement information

This security update replaces previously released security update KB 2965302.

File hash information

Package Name Package Hash SHA 1 Package Hash SHA 2
pjsrvloc2010-kb3114889-fullfile-x64-glb.exe 5FF791B9A571C3DE534B0931163973B4DF1DB77E 5D6D1198EA1E275D66767C9FFD385304BB1D747D545979A8272AB387C3325BB3

File information

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

__

For all supported x64-based versions of Project Server 2010

File identifier File name File version File size Date Time
prjsvr.sql.loc.localizedupgrade.xml.1025 localizedupgrade.xml 336,590 15-Oct-2014 10:00
prjsvr.sql.loc.localizedupgrade.xml.1029 localizedupgrade.xml 328,920 15-Oct-2014 09:52
prjsvr.sql.loc.localizedupgrade.xml.1030 localizedupgrade.xml 326,365 15-Oct-2014 09:51
prjsvr.sql.loc.localizedupgrade.xml.1031 localizedupgrade.xml 327,953 15-Oct-2014 09:54
prjsvr.sql.loc.localizedupgrade.xml.1032 localizedupgrade.xml 346,935 15-Oct-2014 09:55
prjsvr.sql.loc.localizedupgrade.xml.1033 localizedupgrade.xml 324,189 13-May-2015 08:16
microsoft.office.project.shared.intl.loc.dll.3082 microsoft.office.project.shared.intl.resources.dll 14.0.7007 232,024 14-Dec-2012 11:22
prjsvr.sql.loc.insdeflp.sql.3082 insdeflp.sql 541,432 14-Dec-2012 10:02
prjsvr.sql.loc.localizedupgrade.xml.3082 localizedupgrade.xml 328,451 15-Oct-2014 09:53
pwa.lcid.resx.3082 pwa.es-es.resx 866,514 14-Dec-2012 10:02
prjsvr.sql.loc.insdef.sql.1035 insdef.sql 25,206 14-Dec-2012 10:03
prjsvr.sql.loc.localizedupgrade.xml.1035 localizedupgrade.xml 327,055 15-Oct-2014 09:55
microsoft.office.project.shared.intl.loc.dll.1036 microsoft.office.project.shared.intl.resources.dll 14.0.7007 236,144 14-Dec-2012 11:26
milestonesduethismonth.xlsx.1036 milestonesduethismonth.xlsx 18,940 14-Dec-2012 10:06
prjsvr.sql.loc.insdeflp.sql.1036 insdeflp.sql 540,026 14-Dec-2012 10:06
prjsvr.sql.loc.localizedupgrade.xml.1036 localizedupgrade.xml 328,028 15-Oct-2014 09:54
pwa.lcid.resx.1036 pwa.fr-fr.resx 882,517 17-Aug-2013 08:59
pwa.resources.pwafeatures.resx.1036 pwafeatures.fr-fr.resx 137,285 14-Dec-2012 10:06
prjsvr.sql.loc.localizedupgrade.xml.1037 localizedupgrade.xml 331,785 15-Oct-2014 09:55
prjsvr.sql.loc.localizedupgrade.xml.1038 localizedupgrade.xml 329,539 15-Oct-2014 09:55
prjsvr.sql.loc.localizedupgrade.xml.1040 localizedupgrade.xml 327,618 15-Oct-2014 10:04
prjsvr.sql.loc.localizedupgrade.xml.1041 localizedupgrade.xml 331,074 15-Oct-2014 04:31
prjsvr.sql.loc.localizedupgrade.xml.1042 localizedupgrade.xml 327,044 15-Oct-2014 09:56
issuesandrisks.xlsx.1044 issuesandrisks.xlsx 16,617 14-Dec-2012 10:03
microsoft.office.project.shared.intl.loc.dll.1044 microsoft.office.project.shared.intl.resources.dll 14.0.7007 227,928 14-Dec-2012 11:24
prjmsg.dll_1044 microsoft.office.project.server.msg.dll 14.0.7007 176,224 14-Dec-2012 11:24
prjsvr.sql.loc.insdeflp.sql.1044 insdeflp.sql 539,220 14-Dec-2012 10:03
prjsvr.sql.loc.localizedupgrade.xml.1044 localizedupgrade.xml 325,421 15-Oct-2014 09:56
pwa.lcid.resx.1044 pwa.nb-no.resx 826,856 14-Dec-2012 10:03
pwa.resources.pwafeatures.resx.1044 pwafeatures.nb-no.resx 131,329 14-Dec-2012 10:03
pws.resources.pws.resx.1044 pws.nb-no.resx 25,688 14-Dec-2012 10:03
prjsvr.sql.loc.insdeflp.sql.1043 insdeflp.sql 537,950 14-Dec-2012 10:03
prjsvr.sql.loc.localizedupgrade.xml.1043 localizedupgrade.xml 326,581 15-Oct-2014 09:57
prjsvr.sql.loc.localizedupgrade.xml.1045 localizedupgrade.xml 329,151 15-Oct-2014 09:57
prjsvr.sql.loc.insdeflp.sql.1046 insdeflp.sql 543,520 14-Dec-2012 10:11
prjsvr.sql.loc.localizedupgrade.xml.1046 localizedupgrade.xml 327,489 15-Oct-2014 10:06
prjsvr.sql.loc.insdeflp.sql.2070 insdeflp.sql 540,246 14-Dec-2012 10:02
prjsvr.sql.loc.localizedupgrade.xml.2070 localizedupgrade.xml 327,731 15-Oct-2014 10:04
prjsvr.sql.loc.localizedupgrade.xml.1049 localizedupgrade.xml 342,722 15-Oct-2014 09:59
prjsvr.sql.loc.localizedupgrade.xml.1051 localizedupgrade.xml 329,359 15-Oct-2014 09:59
prjsvr.sql.loc.localizedupgrade.xml.1060 localizedupgrade.xml 325,912 15-Oct-2014 10:00
prjsvr.sql.loc.localizedupgrade.xml.1053 localizedupgrade.xml 326,007 15-Oct-2014 10:00
prjsvr.sql.loc.localizedupgrade.xml.1055 localizedupgrade.xml 326,568 15-Oct-2014 10:00
prjsvr.sql.loc.localizedupgrade.xml.1058 localizedupgrade.xml 341,769 15-Oct-2014 10:01
prjsvr.sql.loc.localizedupgrade.xml.2052 localizedupgrade.xml 323,022 15-Oct-2014 10:00
prjsvr.sql.loc.localizedupgrade.xml.1028 localizedupgrade.xml 323,285 15-Oct-2014 10:01
dataedit.dll dataedit.dll 14.0.7156.5000 453,304 29-Jul-2015 07:34
microsoft.office.project.schema.dll microsoft.office.project.schema.dll 14.0.7005.1000 5,323,344 31-Oct-2012 07:36
microsoft.office.project.server.administration.dll microsoft.office.project.server.administration.dll 14.0.7118.5000 289,464 12-Feb-2014 07:34
microsoft.office.project.server.communications.dll microsoft.office.project.server.communications.dll 14.0.7141.5000 289,464 03-Dec-2014 11:10
microsoft.office.project.server.communications.internal.dll microsoft.office.project.server.communications.internal.dll 14.0.7141.5000 502,448 03-Dec-2014 11:10
microsoft.office.project.server.dll microsoft.office.project.server.dll 14.0.7165.5000 7,293,624 11-Dec-2015 07:09
microsoft.office.project.server.library.dll microsoft.office.project.server.library.dll 14.0.7141.5000 2,149,048 03-Dec-2014 10:50
microsoft.office.project.server.native.dll microsoft.office.project.server.native.dll 14.0.7011.1000 483,488 06-Mar-2013 03:14
microsoft.office.project.server.pwa.applicationpages.dll microsoft.office.project.server.pwa.applicationpages.dll 14.0.7148.5000 1,051,368 31-Mar-2015 12:44
microsoft.office.project.server.pwa.dll microsoft.office.project.server.pwa.dll 14.0.7208.5000 2,084,656 11-Apr-2018 10:57
microsoft.office.project.server.upgrade.dll microsoft.office.project.server.upgrade.dll 14.0.7156.5000 5,999,288 29-Jul-2015 07:34
microsoft.office.project.server.webservice.dll microsoft.office.project.server.webservice.dll 14.0.7141.5000 494,264 03-Dec-2014 11:10
microsoft.office.project.shared.dll microsoft.office.project.shared.dll 14.0.7101.5000 133,816 22-Apr-2013 04:49
microsoft.office.project.webproj.dll microsoft.office.project.webproj.dll 14.0.7143.5000 789,168 13-Jan-2015 01:36
microsoft.office.project.webprojserver.dll 14.0.7143.5000 789,168 13-Jan-2015 01:36
prjsvr.sql.addpublishsps12.sql addpublishsps12.sql 380,695 15-Oct-2014 04:20
prjsvr.sql.addpubsps12.sql addpubsps12.sql 1,271,536 29-Jul-2015 07:15
prjsvr.sql.addpubtab12.sql addpubtab12.sql 241,370 15-Oct-2014 04:20
prjsvr.sql.addqueue1projectsps12.sql addqueue1projectsps12.sql 91,521 15-Oct-2014 04:20
prjsvr.sql.addqueue1timesheetsps12.sql addqueue1timesheetsps12.sql 92,760 15-Oct-2014 04:20
prjsvr.sql.addreptab12.sql addreptab12.sql 58,857 15-Oct-2014 04:20
prjsvr.sql.addsps12.sql addsps12.sql 565,585 13-May-2015 08:17
prjsvr.sql.addversionsps12.sql addversionsps12.sql 166,071 15-Oct-2014 04:20
prjsvr.sql.addverstab12.sql addverstab12.sql 124,479 15-Oct-2014 04:20
prjsvr.sql.addworkingsps12.sql addworkingsps12.sql 120,660 15-Oct-2014 04:20
prjsvr.sql.addworksps12.sql addworksps12.sql 125,239 15-Oct-2014 04:20
prjsvr.sql.addworktab12.sql addworktab12.sql 132,911 15-Oct-2014 04:20
prjsvr.sql.autogen.sql autogen.sql 22,802 13-May-2015 08:17
prjsvr.sql.initrep12.sql addreportingsps12.sql 1,477,577 15-Oct-2014 04:20
ps12lib.config 609 17-Nov-2010 08:34
ps12lib.dll 14.0.6015.1000 11,712 21-Dec-2010 08:37
pwa.admin.addmodifyuser.aspx addmodifyuser.aspx 146,282 12-Feb-2014 07:23
pwa.admin.enterpriseprojecttypedetails.aspx enterpriseprojecttypedetails.aspx 35,968 08-Nov-2013 05:48
pwa.library.dom.debug.js 24,814 26-Sep-2010 07:22
pwa.library.dom.js 15,550 26-Sep-2010 07:22
pwa.library.gridsatellite.debug.js gridsatellite.debug.js 53,996 27-May-2015 02:24
pwa.library.gridsatellite.js gridsatellite.js 36,543 27-May-2015 02:24
pwa.library.myworksatellite.js mytaskssatellite.js 39,919 10-Feb-2015 03:26
pwa.library.projectcentersatellite.debug.js projectcentersatellite.debug.js 14,092 05-Nov-2014 02:00
pwa.library.projectcentersatellite.js projectcentersatellite.js 10,580 05-Nov-2014 02:00
pwa.library.projectdrilldownsatellite.debug.js projectdrilldownsatellite.debug.js 111,851 27-May-2015 02:24
pwa.library.projectdrilldownsatellite.js projectdrilldownsatellite.js 72,107 27-May-2015 02:24
pwa.library.projectserverscripts.debug.js projectserverscripts.debug.js 414,861 27-Oct-2012 04:15
pwa.library.projectserverscripts.js projectserverscripts.js 308,959 27-Oct-2012 04:15
pwa.library.pwaparts.ascx pwaparts.ascx 19,504 17-Oct-2012 10:46
pwa.library.remotetextconv.debug.js remotetextconv.debug.js 15,948 10-Feb-2015 03:26
pwa.library.remotetextconv.js remotetextconv.js 7,710 10-Feb-2015 03:26
pwa.library.shell.debug.js shell.debug.js 80,098 02-Jul-2011 08:58
pwa.library.shell.js shell.js 51,126 02-Jul-2011 08:58
pwa.library.statusapprovalssatellite.js statusapprovalssatellite.js 19,995 23-May-2013 09:52
pwa.library.timesheetsatellite.js timesheetsatellite.js 56,379 27-Oct-2012 04:15
pwa.library.treepicker.debug.js 13,558 26-Sep-2010 07:22
pwa.library.treepicker.js 5,956 26-Sep-2010 07:22
pwa.pwaribbon.pwaribbon.xml pwaribbon.xml 641,121 31-Oct-2012 12:57
pwa.rules.rulesaddmod.aspx rulesaddmod.aspx 43,598 19-Dec-2013 11:09
pwa.statusing.addtask.aspx addtask.aspx 15,343 19-Dec-2013 11:09
pwa.wssadmin.createpsiapp.apx createpsiserviceapp.aspx 6,132 21-Nov-2012 05:43
pwa.wssadmin.createpwa.aspx createpwa.aspx 18,938 21-Nov-2012 06:06
pwa.wssadmin.managepsiapp.aspx managepsiserviceapp.aspx 5,033 21-Nov-2012 05:43
pwa.wssadmin.managepwa.aspx managepwa.aspx 7,800 21-Nov-2012 05:43
sdk.microsoft.office.project.server.library.dll microsoft.office.project.server.library.dll 14.0.7141.5000 2,149,048 03-Dec-2014 10:50
sdk.microsoft.office.project.shared.dll microsoft.office.project.shared.dll 14.0.7101.5000 133,816 22-Apr-2013 04:49

How to get help and support for this security updateHelp for installing updates: Windows Update: FAQSecurity solutions for IT professionals: Security Support and TroubleshootingHelp for protecting your Windows-based computer from viruses and malware: Microsoft SecureLocal support according to your country: International SupportPropose a feature or provide feedback on SharePoint: SharePoint User Voice portal

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

6.2

Confidence

High

EPSS

0.005

Percentile

75.7%