Lucene search

K
mskbMicrosoftKB3163291
HistoryJul 12, 2016 - 7:00 a.m.

MS16-091: Description of the security update for the .NET Framework 4.5.2 in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: July 12, 2016

2016-07-1207:00:00
Microsoft
support.microsoft.com
19

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.136

Percentile

95.7%

MS16-091: Description of the security update for the .NET Framework 4.5.2 in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: July 12, 2016

View products that this article applies to.

Summary

This update resolves a vulnerability in the Microsoft .NET Framework. The vulnerability could cause information disclosure if an attacker uploads a specially crafted XML file to a web-based application. To learn more about this vulnerability, see Microsoft Security Bulletin MS16-091.

More Information

Important All future security and nonsecurity updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 require update 2919355 to be installed. We recommend that you install update 2919355 on your Windows RT 8.1-based, Windows 8.1-based, or Windows Server 2012 R2-based computer so that you receive future updates.

How to obtain and install this update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see the “Turn on automatic updating in the Control Panel” section of this Safety & Security Center article.

Note For Windows RT 8.1, this update is available through Windows Update only.

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. To install this update, follow the installation instructions on the download page.

DownloadDownload security update 3163291

Update deployment information

For deployment information about this update, see Microsoft Knowledge Base Article 3170048.

Update removal information

Note We do not recommend that you remove any security update.

To remove this update, use the Programs and Features item in Control Panel.

Update restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement information

This update does not replace any previously released update.

__

File information

File hashPackage name Package hash SHA1 Package hash SHA2
Windows8.1-KB3163291-arm.msu 58D4A70FB65F5361DBCB9BB99034FCB5F121B3F4 853F435650CADF32C8659BC8C8A62C0EE369C377E8099CE71421E24A2E670ED0
Windows8.1-KB3163291-x64.msu 513564016A2F56E7E885BBA2F6109897AF35FFCA F585AAE696B9259ED014200F6DF46FD67CA69DA53EDF2B4FC72551556435CFB3
Windows8.1-KB3163291-x86.msu 2CBCFE94A765F936C0BEA09353425BAED0289DA4 771A2146CD4C4107742C75565BC470DA4A37B75F6EB0E8381DB87C1F5EA29CC1
Windows8.1-KB3163291-x86.msu 2CBCFE94A765F936C0BEA09353425BAED0289DA4 771A2146CD4C4107742C75565BC470DA4A37B75F6EB0E8381DB87C1F5EA29CC1
Windows8.1-KB3163291-x64.msu 513564016A2F56E7E885BBA2F6109897AF35FFCA F585AAE696B9259ED014200F6DF46FD67CA69DA53EDF2B4FC72551556435CFB3
Windows8.1-KB3163291-x64.msu 513564016A2F56E7E885BBA2F6109897AF35FFCA F585AAE696B9259ED014200F6DF46FD67CA69DA53EDF2B4FC72551556435CFB3
Windows8.1-KB3163291-x64.msu 513564016A2F56E7E885BBA2F6109897AF35FFCA F585AAE696B9259ED014200F6DF46FD67CA69DA53EDF2B4FC72551556435CFB3
File attributesThe English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
For all supported x86-based versions of systemsFile name File version File size Date Time
system.data.resources.dll 4.0.30319.36341 401,624 24-May-2016 13:11
system.data.resources.dll 4.0.30319.36341 373,464 24-May-2016 13:11
system.data.resources.dll 4.0.30319.36341 370,392 24-May-2016 13:11
system.data.resources.dll 4.0.30319.36341 380,632 24-May-2016 13:11
system.data.resources.dll 4.0.30319.36341 454,360 24-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 373,976 24-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 367,320 24-May-2016 13:11
system.data.resources.dll 4.0.30319.36341 379,096 24-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 392,912 24-May-2016 13:11
system.data.resources.dll 4.0.30319.36341 385,744 24-May-2016 13:11
system.data.resources.dll 4.0.30319.36341 373,464 24-May-2016 13:16
system.data.resources.dll 4.0.30319.36341 397,528 24-May-2016 13:16
system.data.resources.dll 4.0.30319.36341 382,168 24-May-2016 13:16
system.data.resources.dll 4.0.30319.36341 364,248 24-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 377,048 24-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 381,144 24-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 370,904 24-May-2016 13:18
system.data.resources.dll 4.0.30319.36341 374,488 24-May-2016 13:18
system.data.resources.dll 4.0.30319.36341 437,464 24-May-2016 13:10
system.data.resources.dll 4.0.30319.36341 367,320 24-May-2016 13:10
system.data.resources.dll 4.0.30319.36341 368,856 24-May-2016 13:10
system.data.resources.dll 4.0.30319.36341 350,424 24-May-2016 13:10
system.data.resources.dll 4.0.30319.36341 352,984 24-May-2016 13:12
msvcp120_clr0400.dll 12.0.52361.36361 536,768 25-May-2016 13:22
msvcr120_clr0400.dll 12.0.52361.36361 875,712 25-May-2016 13:22
system.data.dll 4.0.30319.36361 3,209,392 25-May-2016 13:22
For all supported x64-based versions of systemsFile name File version File size Date Time
msvcp120_clr0400.dll 12.0.52361.36361 678,600 25-May-2016 13:12
msvcr120_clr0400.dll 12.0.52361.36361 869,576 25-May-2016 13:12
system.data.dll 4.0.30319.36361 3,238,064 25-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 401,624 04-Mar-2016 14:11
system.data.resources.dll 4.0.30319.36341 373,464 04-Mar-2016 14:11
system.data.resources.dll 4.0.30319.36341 370,392 04-Mar-2016 14:11
system.data.resources.dll 4.0.30319.36341 380,632 04-Mar-2016 14:11
system.data.resources.dll 4.0.30319.36341 454,512 25-May-2016 13:10
system.data.resources.dll 4.0.30319.36341 373,976 25-May-2016 13:11
system.data.resources.dll 4.0.30319.36341 367,320 19-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 379,096 04-Mar-2016 14:11
system.data.resources.dll 4.0.30319.36341 392,920 19-May-2016 13:11
system.data.resources.dll 4.0.30319.36341 385,752 19-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 373,464 19-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 397,528 19-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 382,160 19-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 364,248 19-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 377,048 19-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 381,144 19-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 370,904 19-May-2016 13:13
system.data.resources.dll 4.0.30319.36341 374,488 19-May-2016 13:13
system.data.resources.dll 4.0.30319.36341 437,464 19-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 367,320 19-May-2016 13:14
system.data.resources.dll 4.0.30319.36341 368,856 19-May-2016 13:14
system.data.resources.dll 4.0.30319.36341 350,424 25-May-2016 13:09
system.data.resources.dll 4.0.30319.36341 352,984 04-Mar-2016 14:11
msvcp120_clr0400.dll 12.0.52361.36361 536,768 25-May-2016 13:22
msvcr120_clr0400.dll 12.0.52361.36361 875,712 25-May-2016 13:22
system.data.dll 4.0.30319.36361 3,209,392 25-May-2016 13:22
For all supported ARM-based versions of systemsFile name File version File size Date Time
msvcp120_clr0400.dll 12.0.52361.36361 602,128 25-May-2016 13:11
msvcr120_clr0400.dll 12.0.52361.36361 634,384 25-May-2016 13:11
system.data.dll 4.0.30319.36361 3,179,512 25-May-2016 13:11
system.data.resources.dll 4.0.30319.36341 403,488 24-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 375,488 24-May-2016 13:14
system.data.resources.dll 4.0.30319.36341 372,256 24-May-2016 13:14
system.data.resources.dll 4.0.30319.36341 382,656 24-May-2016 13:14
system.data.resources.dll 4.0.30319.36341 456,224 13-Mar-2016 22:37
system.data.resources.dll 4.0.30319.36341 376,000 13-Mar-2016 22:39
system.data.resources.dll 4.0.30319.36341 369,184 24-May-2016 13:16
system.data.resources.dll 4.0.30319.36341 381,120 24-May-2016 13:12
system.data.resources.dll 4.0.30319.36341 394,784 24-May-2016 13:16
system.data.resources.dll 4.0.30319.36341 387,776 24-May-2016 13:16
system.data.resources.dll 4.0.30319.36341 375,480 25-May-2016 13:16
system.data.resources.dll 4.0.30319.36341 399,392 25-May-2016 13:16
system.data.resources.dll 4.0.30319.36341 384,192 25-May-2016 13:16
system.data.resources.dll 4.0.30319.36341 366,272 25-May-2016 13:09
system.data.resources.dll 4.0.30319.36341 378,912 25-May-2016 13:09
system.data.resources.dll 4.0.30319.36341 383,008 25-May-2016 13:09
system.data.resources.dll 4.0.30319.36341 372,920 14-Mar-2016 15:30
system.data.resources.dll 4.0.30319.36341 376,352 14-Mar-2016 15:31
system.data.resources.dll 4.0.30319.36341 439,488 14-Mar-2016 15:22
system.data.resources.dll 4.0.30319.36341 369,184 14-Mar-2016 15:23
system.data.resources.dll 4.0.30319.36341 370,880 14-Mar-2016 15:23
system.data.resources.dll 4.0.30319.36341 352,440 04-Mar-2016 14:12
system.data.resources.dll 4.0.30319.36341 354,848 24-May-2016 13:12

__

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Applies toThis article applies to the following:

  • Microsoft .NET Framework 4.5.2 when used with:
    • Windows Server 2012 R2
    • Windows 8.1
    • Windows RT 8.1

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.136

Percentile

95.7%