MS16-079: Security update for Microsoft Exchange: June 14, 2016

2016-06-1400:00:00

Microsoft

support.microsoft.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

<html><body><p>Resolves a vulnerability that could allow an Elevation of Privilege in Oracle products installed on a Microsoft Exchange Server.</p><h2>Summary</h2><div>This security update resolves a vulnerability that could allow an Elevation of Privilege in Oracle products installed on a Microsoft Exchange Server. <br /><br />To learn more about the vulnerability, see <a href=“https://technet.microsoft.com/library/security/ms16-079” target=“_self”>Microsoft Security Bulletin MS16-079</a>. <span></span></div><h2>More information about this security update</h2><div>The following articles contain more information about this security update as it relates to individual product versions.<ul><li><a href=“https://support.microsoft.com/help/3151086” target=“_self”>KB3151086</a> MS16-079: Update Rollup 20 for Exchange Server 2007 Service Pack 3 (SP3): June 14, 2016</li><li><a href=“https://support.microsoft.com/help/3151097” target=“_self”>KB3151097</a> MS16-079: Update Rollup 14 for Exchange Server 2010 SP3: June 14, 2016</li><li><a href=“https://support.microsoft.com/help/3150501” target=“_self”>KB3150501</a> MS16-079: Description of the security update for Exchange Server 2016 and Exchange Server 2013: June 14, 2016</li></ul></div><h2>More Information</h2><div><div><div><div><span><span></span></span><span><span>Security update deployment information</span></span></div><div><span><div><h4>Microsoft Exchange Server 2007</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><br /><div><table><tr><td><span>Inclusion in Future Service Packs</span></td><td>The update for this issue will be included in a future service pack or update rollup</td></tr><tr><td><span>Security update file name</span></td><td>For Microsoft Exchange Server 2007 Service Pack 3 :<br /><span>Exchange2007-KB3151086-x64-EN.msp</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/912203” target=“_self”>Microsoft Knowledge Base Article 912203</a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a system restart. If the required files are being used, this update will require a system restart. If this behavior occurs, you receive a message that advises you to restart your system.</td></tr><tr><td><span>Update log file</span></td><td>KB3151086.log</td></tr><tr><td><span>Removal information</span></td><td>Use <span>Add or Remove Programs</span> item in Control Panel.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3151086” target=“_self”>Microsoft Knowledge Base Article 3151086</a></td></tr><tr><td><span>Registry key verification</span></td><td>For Microsoft Exchange Server 2007 Service Pack 3: <br />HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Exchange 2007\SP2\KB3151086</td></tr></table></div><h4>Microsoft Exchange Server 2010</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><div><table><tr><td><span>Inclusion in Future Service Packs</span></td><td>The update for this issue will be included in a future service pack or update rollup</td></tr><tr><td><span>Security update file name</span></td><td>For Microsoft Exchange Server 2010 Service Pack 3:<br /><span>Exchange2010-KB3151097-x64-en.msp</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/912203” target=“_self”>Microsoft Knowledge Base Article 912203</a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a system restart. If the required files are being used, this update will require a system restart. If this behavior occurs, you receive a message that advises you to restart your system.</td></tr><tr><td><span>Update log file</span></td><td>KB3151097.log</td></tr><tr><td><span>Removal information</span></td><td>Use <span>Add or Remove Programs</span> item in Control Panel.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3151097” target=“_self”>Microsoft Knowledge Base Article 3151097</a></td></tr><tr><td><span>Registry key verification</span></td><td>For Microsoft Exchange Server 2010 Service Pack 3:<br />HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Exchange 2010\SP3\ KB3151097</td></tr></table></div><h4>Microsoft Exchange Server 2013</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><div><table><tr><td><span>Inclusion in Future Service Packs</span></td><td>The update for this issue will be included in a future service pack or update rollup</td></tr><tr><td><span>Security update file name</span></td><td>For Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server 2013 Cumulative Update 11 and Microsoft Exchange Server 2013 Cumulative Update 12:<br /><span>Exchange2013-KB3150501-x64-en.msp</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base Article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a system restart. If the required files are being used, this update will require a system restart. If this behavior occurs, you receive a message that advises you to restart your system.</td></tr><tr><td><span>Update log file</span></td><td>KB3150501.log</td></tr><tr><td><span>Removal information</span></td><td>Use <span>Add or Remove Programs</span> item in Control Panel.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3150501” target=“_self”>Microsoft Knowledge Base Article 3150501</a></td></tr><tr><td><span>Registry key verification</span></td><td>For supported editions of Microsoft Exchange Server 2013:<br />HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Exchange 2013\KB3150501</td></tr></table></div><br /><h4>Microsoft Exchange Server 2016</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><div><table><tr><td><span>Inclusion in Future Service Packs</span></td><td>The update for this issue will be included in a future service pack or update rollup</td></tr><tr><td><span>Security update file name</span></td><td>For Microsoft Exchange Server 2016 and Microsoft Exchange Server 2016 Cumulative Update 1:<br /><span>Exchange2016-KB3150501-x64-en.msp</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base Article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a system restart. If the required files are being used, this update will require a system restart. If this behavior occurs, you receive a message that advises you to restart your system.</td></tr><tr><td><span>Update log file</span></td><td>KB3150501.log</td></tr><tr><td><span>Removal information</span></td><td>Use <span>Add or Remove Programs</span> item in Control Panel.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3150501” target=“_self”>Microsoft Knowledge Base Article 3150501</a></td></tr><tr><td><span>Registry key verification</span></td><td>For supported editions of Microsoft Exchange Server 2016:<br />HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Exchange 2016\KB3150501</td></tr></table></div></div><br /></span></div></div></div><div><div><div><span><span></span></span><span><span>How to get help and support for this security update</span></span></div><div><span><div>Help for installing updates: <a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals: <a href=“https://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br />Help for protecting your Windows-based computer from viruses and malware: <a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country: <a href=“https://support.microsoft.com/” target=“_self”>International Support</a></div><br /></span></div></div></div></div><h2>References</h2><div><div><div><div><span><span></span></span><span><span>Third-party information disclaimer</span></span></div><div><span><div>The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, about the performance or reliability of these products.</div><br /></span></div></div></div></div></body></html>