Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mskbMicrosoftKB3191203
HistoryOct 11, 2016 - 7:00 a.m.

MS16-120 and MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016

2016-10-1107:00:00
Microsoft
support.microsoft.com
25

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.456 Medium

EPSS

Percentile

97.4%

JSON

MS16-120 and MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016

Summary

This security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application that could exploit the vulnerabilities and take control of an affected system.

To learn more about the vulnerability, see Microsoft Security Bulletin MS16-120 and Microsoft Security Bulletin MS16-123.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see
Get security updates automatically.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

__

Method 3: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Click the download link in Microsoft Security Bulletin MS16-120 or in [Microsoft Security Bulletin MS16-123](<https://technet.microsoft.com/library/security/ ms16-123>) that corresponds to the version of Windows that you are running.

More Information

__

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

File Information

__

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB3191203-ia64.msu F7814CFB4B094C335CE85FD60155FCBBFA772BAD B61AC0C6DF141CD09F8A65776F99F91496E0CE6701CE1301C2756D55E7C05EB9
Windows6.0-KB3191203-x86.msu 0A0AA9355BF35BAAC6A07D4F41EE06918E5C067B 0986EF88E07C3884A94FEA5B47845A9319FD5F217E07844D226B6D70C80872C0
Windows6.0-KB3191203-x64.msu 05E165673951228CA651FAA659DD24341EFDA6F4 F605C4AC0B642B8CC19C2F9961312562A5B9D92F18FAC447671C9AD7BC061CD9

__

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.Windows Vista and Windows Server 2008 file informationNotes

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    Version| Product| Milestone| Service branch
    —|—|—|—
    6.0.600 2.19xxx| Windows Vista or Windows Server 2008| SP2| GDR
    6.0.600 2.23xxx| Windows Vista or Windows Server 2008| SP2| LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
    For all supported ia64-based versionsFile name| File version| File size| Date| Time| Platform
    —|—|—|—|—|—
    Win32k.sys| 6.0.6002.19693| 6,695,424| 10-Sep-2016| 15:10| IA-64
    Win32k.sys| 6.0.6002.24017| 6,705,152| 09-Sep-2016| 14:25| IA-64
    Gdiplus.dll| 5.2.6002.19693| 4,916,224| 10-Sep-2016| 16:21| IA-64
    Gdiplus.dll| 5.2.6002.24017| 4,917,248| 09-Sep-2016| 15:10| IA-64
    Gdiplus.dll| 6.0.6002.19693| 5,273,600| 10-Sep-2016| 16:21| IA-64
    Gdiplus.dll| 6.0.6002.24017| 5,273,600| 09-Sep-2016| 15:10| IA-64
    Gdiplus.dll| 5.2.6002.19693| 1,753,088| 10-Sep-2016| 16:27| x86
    Gdiplus.dll| 5.2.6002.24017| 1,753,088| 09-Sep-2016| 15:14| x86
    Gdiplus.dll| 6.0.6002.19693| 1,841,664| 10-Sep-2016| 16:27| x86
    Gdiplus.dll| 6.0.6002.24017| 1,841,664| 09-Sep-2016| 15:15| x86
    For all supported x86-based versionsFile name| File version| File size| Date| Time| Platform
    —|—|—|—|—|—
    D2d1.dll| 7.0.6002.18923| 683,008| 27-Aug-2013| 02:00| x86
    D2d1.dll| 7.0.6002.24017| 682,496| 09-Sep-2016| 14:23| x86
    Fntcache.dll| 7.0.6002.19693| 802,304| 10-Sep-2016| 15:02| x86
    Fntcache.dll| 7.0.6002.24017| 802,304| 09-Sep-2016| 14:21| x86
    Dwrite.dll| 7.0.6002.19693| 1,073,152| 10-Sep-2016| 15:02| x86
    Dwrite.dll| 7.0.6002.24017| 1,073,152| 09-Sep-2016| 14:21| x86
    D3d10level9.dll| 7.0.6002.19647| 486,912| 21-Apr-2016| 14:24| x86
    D3d10level9.dll| 7.0.6002.24017| 486,912| 09-Sep-2016| 14:32| x86
    D3d10_1.dll| 7.0.6002.18923| 160,768| 27-Aug-2013| 04:28| x86
    D3d10_1core.dll| 7.0.6002.18827| 219,648| 17-Apr-2013| 12:30| x86
    D3d10_1.dll| 7.0.6002.24017| 160,768| 09-Sep-2016| 15:15| x86
    D3d10_1core.dll| 7.0.6002.24017| 219,648| 09-Sep-2016| 15:15| x86
    D3d10.dll| 7.0.6002.18923| 1,029,120| 27-Aug-2013| 04:28| x86
    D3d10core.dll| 7.0.6002.18827| 189,952| 17-Apr-2013| 12:30| x86
    D3d10.dll| 7.0.6002.24017| 1,029,120| 09-Sep-2016| 15:15| x86
    D3d10core.dll| 7.0.6002.24017| 189,952| 09-Sep-2016| 15:15| x86
    D3d10warp.dll| 7.0.6002.18923| 1,172,480| 27-Aug-2013| 02:29| x86
    D3d10warp.dll| 7.0.6002.24017| 1,172,480| 09-Sep-2016| 14:34| x86
    Win32k.sys| 6.0.6002.19693| 2,072,064| 10-Sep-2016| 15:02| x86
    Win32k.sys| 6.0.6002.24017| 2,080,256| 09-Sep-2016| 14:21| x86
    Gdiplus.dll| 5.2.6002.19693| 1,753,088| 10-Sep-2016| 16:27| x86
    Gdiplus.dll| 5.2.6002.24017| 1,753,088| 09-Sep-2016| 15:14| x86
    Gdiplus.dll| 6.0.6002.19693| 1,841,664| 10-Sep-2016| 16:27| x86
    Gdiplus.dll| 6.0.6002.24017| 1,841,664| 09-Sep-2016| 15:15| x86
    For all supported x64-based versionsFile name| File version| File size| Date| Time| Platform
    —|—|—|—|—|—
    D2d1.dll| 7.0.6002.18923| 834,048| 27-Aug-2013| 02:13| x64
    D2d1.dll| 7.0.6002.24017| 834,048| 09-Sep-2016| 14:44| x64
    Fntcache.dll| 7.0.6002.19693| 1,154,560| 10-Sep-2016| 15:23| x64
    Fntcache.dll| 7.0.6002.24017| 1,154,560| 09-Sep-2016| 14:42| x64
    Dwrite.dll| 7.0.6002.19693| 1,561,600| 10-Sep-2016| 15:23| x64
    Dwrite.dll| 7.0.6002.24017| 1,561,600| 09-Sep-2016| 14:43| x64
    D3d10level9.dll| 7.0.6002.19647| 566,272| 21-Apr-2016| 15:54| x64
    D3d10level9.dll| 7.0.6002.24017| 566,272| 09-Sep-2016| 14:56| x64
    D3d10_1.dll| 7.0.6002.18923| 196,096| 27-Aug-2013| 04:33| x64
    D3d10_1core.dll| 7.0.6002.18827| 327,680| 17-Apr-2013| 13:04| x64
    D3d10_1.dll| 7.0.6002.24017| 196,096| 09-Sep-2016| 15:34| x64
    D3d10_1core.dll| 7.0.6002.24017| 327,680| 09-Sep-2016| 15:34| x64
    D3d10.dll| 7.0.6002.18923| 1,268,224| 27-Aug-2013| 04:33| x64
    D3d10core.dll| 7.0.6002.18827| 287,232| 17-Apr-2013| 13:04| x64
    D3d10.dll| 7.0.6002.24017| 1,268,224| 09-Sep-2016| 15:34| x64
    D3d10core.dll| 7.0.6002.24017| 287,232| 09-Sep-2016| 15:34| x64
    D3d10warp.dll| 7.0.6002.18923| 2,002,944| 27-Aug-2013| 02:45| x64
    D3d10warp.dll| 7.0.6002.24017| 2,002,944| 09-Sep-2016| 14:57| x64
    Win32k.sys| 6.0.6002.19693| 2,803,712| 10-Sep-2016| 15:24| x64
    Win32k.sys| 6.0.6002.24017| 2,805,760| 09-Sep-2016| 14:44| x64
    Gdiplus.dll| 5.2.6002.19693| 2,195,456| 10-Sep-2016| 16:44| x64
    Gdiplus.dll| 5.2.6002.24017| 2,195,968| 09-Sep-2016| 15:33| x64
    Gdiplus.dll| 6.0.6002.19693| 2,427,392| 10-Sep-2016| 16:44| x64
    Gdiplus.dll| 6.0.6002.24017| 2,427,392| 09-Sep-2016| 15:33| x64
    D2d1.dll| 7.0.6002.18923| 683,008| 27-Aug-2013| 02:00| x86
    D2d1.dll| 7.0.6002.24017| 682,496| 09-Sep-2016| 14:23| x86
    Dwrite.dll| 7.0.6002.19693| 1,073,152| 10-Sep-2016| 15:02| x86
    Dwrite.dll| 7.0.6002.24017| 1,073,152| 09-Sep-2016| 14:21| x86
    D3d10level9.dll| 7.0.6002.19647| 486,912| 21-Apr-2016| 14:24| x86
    D3d10level9.dll| 7.0.6002.24017| 486,912| 09-Sep-2016| 14:32| x86
    D3d10_1.dll| 7.0.6002.18923| 160,768| 27-Aug-2013| 04:28| x86
    D3d10_1core.dll| 7.0.6002.18827| 219,648| 17-Apr-2013| 12:30| x86
    D3d10_1.dll| 7.0.6002.24017| 160,768| 09-Sep-2016| 15:15| x86
    D3d10_1core.dll| 7.0.6002.24017| 219,648| 09-Sep-2016| 15:15| x86
    D3d10.dll| 7.0.6002.18923| 1,029,120| 27-Aug-2013| 04:28| x86
    D3d10core.dll| 7.0.6002.18827| 189,952| 17-Apr-2013| 12:30| x86
    D3d10.dll| 7.0.6002.24017| 1,029,120| 09-Sep-2016| 15:15| x86
    D3d10core.dll| 7.0.6002.24017| 189,952| 09-Sep-2016| 15:15| x86
    D3d10warp.dll| 7.0.6002.18923| 1,172,480| 27-Aug-2013| 02:29| x86
    D3d10warp.dll| 7.0.6002.24017| 1,172,480| 09-Sep-2016| 14:34| x86
    Gdiplus.dll| 5.2.6002.19693| 1,753,088| 10-Sep-2016| 16:27| x86
    Gdiplus.dll| 5.2.6002.24017| 1,753,088| 09-Sep-2016| 15:14| x86
    Gdiplus.dll| 6.0.6002.19693| 1,841,664| 10-Sep-2016| 16:27| x86
    Gdiplus.dll| 6.0.6002.24017| 1,841,664| 09-Sep-2016| 15:15| x86

Related

nessus 3
mskb 35
openvas 9
kaspersky 4
prion 11
cve 11
checkpoint_advisories 8
symantec 10
mscve 10
attackerkb 1
cisa_kev 1
zdi 1
threatpost 4
thn 1
nessus
nessus
MS16-120: Security Update for Microsoft Graphics Component (3192884)
2016-10-12 00:00:00
MS16-123: Security Update for Windows Kernel-Mode Drivers (3192892)
2016-10-12 00:00:00
MS16-120: Security Update for Microsoft Graphics Component (3192884) (macOS)
2016-10-12 00:00:00
mskb
mskb
MS16-120: Security update for Microsoft graphics component: October 11, 2016
2016-10-11 00:00:00
Security update 2016-10-11
2016-10-11 07:00:00
MS16-120: Description of the security update for Office 2010: October 11, 2016
2016-10-11 07:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (3192884)
2016-10-12 00:00:00
Microsoft Lync Multiple Vulnerabilities (3192884)
2016-10-12 00:00:00
Microsoft Office Word Viewer Remote Code Execution Vulnerabilities (3192884)
2016-10-12 00:00:00
kaspersky
kaspersky
KLA10884 Code execution vulnerability in Microsoft Office
2016-10-11 00:00:00
KLA11906 Multiple vulnerabilities for Microsoft Products (ESU)
2016-10-11 00:00:00
KLA10882 Multiple vulnerabilities in Microsoft Windows
2016-10-11 00:00:00
prion
prion
Privilege escalation
2016-10-14 02:59:00
Privilege escalation
2016-10-14 02:59:00
Privilege escalation
2016-10-14 02:59:00
cve
cve
CVE-2016-3376
2016-10-14 02:59:00
CVE-2016-7185
2016-10-14 02:59:00
CVE-2016-3266
2016-10-14 02:59:00
checkpoint_advisories
checkpoint_advisories
Microsoft Win32k Elevation of Privilege (MS16-123: CVE-2016-7211)
2016-10-11 00:00:00
Microsoft Windows Win32k Elevation of Privilege (MS16-120: CVE-2016-3270)
2016-10-11 00:00:00
Microsoft Windows GDI+ Information Disclosure (MS16-120: CVE-2016-3262)
2016-10-11 00:00:00
symantec
symantec
Microsoft Windows Graphics Component CVE-2016-3270 Local Privilege Escalation Vulnerability
2016-10-11 00:00:00
Microsoft Windows Kernel 'Win32k.sys' CVE-2016-7211 Local Privilege Escalation Vulnerability
2016-10-11 00:00:00
Microsoft Windows Graphics Component CVE-2016-3263 Information Disclosure Vulnerability
2016-10-11 00:00:00
mscve
mscve
Win32k Elevation of Privilege Vulnerability
2016-10-11 07:00:00
GDI+ Information Disclosure Vulnerability
2016-10-11 07:00:00
GDI+ Remote Code Execution Vulnerability
2016-10-11 07:00:00
attackerkb
attackerkb
CVE-2016-3393
2016-10-14 00:00:00
cisa_kev
cisa_kev
Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability
2022-05-25 00:00:00
zdi
zdi
Microsoft Windows MSXML IDispatch Use-After-Free Information Disclosure Vulnerability
2016-09-16 00:00:00
threatpost
threatpost
FruityArmor APT Group Used Recently Patched Windows Zero Day
2016-10-20 07:00:01
Threat Groups SandCat, FruityArmor Exploiting Microsoft Win32k Flaw
2019-03-13 15:15:11
Microsoft Patches Zero-Day Under Active Attack by APT
2018-10-09 21:24:54
thn
thn
Microsoft Patches 5 Zero-Day Vulnerabilities Being Exploited in the Wild
2016-10-11 20:41:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.456 Medium

EPSS

Percentile

97.4%

JSON
Related for KB3191203
nessus3mskb35openvas9kaspersky4prion11cve11checkpoint_advisories8symantec10mscve10attackerkb1cisa_kev1zdi1threatpost4thn1