Lucene search

K
mskbMicrosoftKB3183038
HistorySep 13, 2016 - 12:00 a.m.

MS16-104: Cumulative security update for Internet Explorer: September 13, 2016

2016-09-1300:00:00
Microsoft
support.microsoft.com
35

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

<html><body><p>Resolves vulnerabilities that could allow remote code execution if a user views a specially crafted webpage in Internet Explorer.</p><h2>Summary</h2><div>This security update resolves several reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code execution if a user views a specially crafted webpage in Internet Explorer. To learn more about these vulnerabilities, see <a href=“https://technet.microsoft.com/library/security/ms16-104” target=“_self”>Microsoft Security Bulletin MS16-104</a>.<span></span></div><h2>How to get and install the update</h2><div><h3>Method 1: Microsoft Update</h3><div>This update is available through Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see the “Turn on automatic updating in Control Panel” section of <a href=“https://www.microsoft.com/en-us/safety/pc-security/updates.aspx” target=“_self”>this Safety & Security Center article</a>. <br /><br /><span>Note</span> For Windows RT and Windows RT 8.1, this update is available through Microsoft Update only.</div><h3>Method 2: Microsoft Update Catalog</h3>To get the stand-alone package for this update, go to the <a href=“http://catalog.update.microsoft.com/v7/site/search.aspx?q=kb3175443” target=“_self”>Microsoft Update Catalog</a> website.<br /><br /><h3>Method 3: Microsoft Download Center</h3>You can get the stand-alone update package through the Microsoft Download Center. See <a href=“https://technet.microsoft.com/library/security/ms16-104” target=“_self”>Microsoft Security Bulletin MS16-104</a> to find the download links for this update. </div><h2>More Information</h2><div>The following articles contain more information about this security update:<br /><br /><ul><li><a href=“https://support.microsoft.com/en-us/help/3185319”>3185319 </a> MS16-104: Security update for Internet Explorer: September 13, 2016<br /><span>Known issues with security update 3185319</span><ul><li> When you open a .URL shortcut in Windows Explorer (such as from the Favorites folder), you receive a “File Download – Security Warning” message. To resolve this issue, install update <a href=“https://support.microsoft.com/en-us/help/3199375”>3199375 </a>.<br /> </li><li> Microsoft is aware of limited issues in which an ActiveX install may fail when using the ActiveX Installer Service (AXIS) with Internet Explorer 10 or Internet Explorer 11. To resolve this issue, install update <a href=“https://support.microsoft.com/help/3192665” target=“_self”>3192665</a>.</li></ul></li><li><a href=“https://support.microsoft.com/en-us/help/3188724”>3188724 </a> MS16-116: Security Update in OLE Automation for VBScript Scripting Engine: September 13, 2016 </li><li><a href=“https://support.microsoft.com/en-us/help/3184122”>3184122 </a> MS16-116: Description of the security update for OLE Automation for VBScript Scripting Engine: September 13, 2016</li></ul>Additionally, see the following articles for information about the Windows 10, Windows 10 Version 1511, and Windows 10 Version 1607 cumulative updates:<br /><br /><ul><li><a href=“https://support.microsoft.com/en-us/help/3185611”>3185611 </a> Cumulative Update for Windows 10: September 13, 2016 </li><li><a href=“https://support.microsoft.com/en-us/help/3185614”>3185614 </a> Cumulative Update for Windows 10 Version 1511 : September 13, 2016 </li><li><a href=“https://support.microsoft.com/en-us/help/3189866”>3189866 </a> Cumulative update for Windows 10 Version 1607: September 13, 2016 </li></ul><div><div><div><span><span></span></span><span><span>Security update deployment information</span></span></div><div><span><div><h4>Windows Vista (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software.<br /><div><table><tr><td><span>Security update file names</span></td><td>For Internet Explorer 9 on all supported 32-bit editions of Windows Vista:<br /><span>IE9-Windows6.0-KB3185319-x86.msu</span></td></tr><tr><td></td><td>For Internet Explorer 9 on all supported x64-based editions of Windows Vista:<br /><span>IE9-Windows6.0-KB3185319-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base Article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this update.</td></tr><tr><td><span>Removal information</span></td><td>WUSA.exe does not support the removal of updates. To uninstall an update that was installed by WUSA, open Control Panel, and then click <span>Security</span>. Under <span>Windows Update</span>, click <span>View installed updates</span>, and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3185319” target=“_self”>Microsoft Knowledge Base Article 3185319</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note </span>A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows Server 2008 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software.<br /><div><table><tr><td><span>Security update file names</span></td><td>For Internet Explorer 9 on all supported 32-bit editions of Windows Server 2008:<br /><span>IE9-Windows6.0-KB3185319-x86.msu</span></td></tr><tr><td></td><td>For Internet Explorer 9 on all supported x64-based editions of Windows Server 2008:<br /><span>IE9-Windows6.0-KB3185319-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base Article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>WUSA.exe does not support the removal of updates. To uninstall an update that was installed by WUSA, click <span>Control Panel</span>, and then click <span>Security</span>. Under <span>Windows Update</span>, click <span>View installed updates</span> and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3185319” target=“_self”>Microsoft Knowledge Base Article 3185319</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows 7 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software.<br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 11 for Windows 7 for 32-bit Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB3185319-x86.msu</span></td></tr><tr><td></td><td>For Internet Explorer 11 for Windows 7 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB3185319-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base Article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update installed by WUSA, use the <span>/Uninstall</span> setup switch or click <span>Control Panel</span>, click <span>System and Security</span>, and then under <span>Windows Update</span>, click <span>View installed updates</span> and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3185319” target=“_self”>Microsoft Knowledge Base Article 3185319</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows Server 2008 R2 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software.<br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB3185319-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base Article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update installed by WUSA, use the <span>/Uninstall</span> setup switch or click <span>Control Panel</span>, click <span>System and Security</span>, and then under <span>Windows Update</span>, click <span>View installed updates</span> and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3185319” target=“_self”>Microsoft Knowledge Base Article 3185319</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows 8.1 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software.<br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 11 in all supported 32-bit editions of Windows 8.1:<br /><span>Windows8.1-KB3185319-x86.msu</span></td></tr><tr><td></td><td>For Internet Explorer 11 in all supported x64-based editions of Windows 8.1:<br /><span>Windows8.1-KB3185319-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base Article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update installed by WUSA, use the <span>/Uninstall</span> setup switch or click <span>Control Panel</span>, click <span>System and Security</span>, click <span>Windows Update</span>, and then under <span>See also</span>, click Installed updates and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3185319” target=“_self”>Microsoft Knowledge Base Article 3185319</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows Server 2012 and Windows Server 2012 R2 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software.<br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 10 on all supported editions of Windows Server 2012:<br /><span>Windows8-RT-KB3185319-x86.msu</span></td></tr><tr><td></td><td>For Internet Explorer 11 on all supported editions of Windows Server 2012 R2:<br /><span>Windows8.1-KB3185319-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base Article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update installed by WUSA, use the <span>/Uninstall</span> setup switch or click <span>Control Panel</span>, click <span>System and Security</span>, click <span>Windows Update</span>, and then under <span>See also</span>, click Installed updates and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3185319” target=“_self”>Microsoft Knowledge Base Article 3185319</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows RT 8.1 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software.<br /><div><table><tr><td><span>Deployment</span></td><td>This update is available through <a href=“http://go.microsoft.com/fwlink/?linkid=21130” target=“_self”>Windows Update</a>.</td></tr><tr><td><span>Restart Requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal Information</span></td><td>Click <span>Control Panel</span>, click <span>System and Security</span>, click <span>Windows Update</span>, and then under <span>See also</span>, click <span>Installed </span><span>updates</span> and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>Not applicable</td></tr></table></div><h4>Windows 10 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software.<br /><div><table><tr><td><span>Security update file name</span></td><td>For all supported 32-bit editions of Windows 10:<br /><span>Windows10.0-KB3185611-x86.msu</span></td></tr><tr><td><br /></td><td>For all supported x64-based editions of Windows 10:<br /><span>Windows10.0-KB3185611-x64.msu</span></td></tr><tr><td><br /></td><td>For all supported 32-bit editions of Windows 10 Version 1511:<br /><span>Windows10.0-Kb3185614-x86.msu</span></td></tr><tr><td><br /></td><td>For all supported x64-based editions of Windows 10 Version 1511:<br /><span>Windows10.0-Kb3185614-x64.msu</span></td></tr><tr><td><br /></td><td>For all supported 32-bit editions of Windows 10 Version 1607:<br /><span>Windows10.0-KB3189866-x86.msu</span></td></tr><tr><td><br /></td><td>For all supported x64-based editions of Windows 10 Version 1607:<br /><span>Windows10.0-KB3189866-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base Article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update installed by WUSA, use the <span>/Uninstall</span> setup switch or click <span>Control Panel</span>, click <span>System and Security</span>, click <span>Windows Update</span>, and then under See also, click Installed updates and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3185611” target=“_self”>Microsoft Knowledge Base Article 3185611</a><br />See <a href=“https://support.microsoft.com/help/3185614” target=“_self”>Microsoft Knowledge Base Article 3185614</a><br />See <a href=“https://support.microsoft.com/help/3189866” target=“_self”>Microsoft Knowledge Base Article 3189866</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div></div><br /></span></div></div></div><div><div><div><span><span></span></span><span><span>How to get help and support for this security update</span></span></div><div><span><div>Help for installing updates: <a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals: <a href=“https://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br />Help for protecting your Windows-based computer from viruses and malware: <a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country: <a href target=“_self”>International Support</a></div><br /></span></div></div></div></div></body></html>

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C