MS16-124: Description of the security update for Windows registry: October 11, 2016

Summary

This security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow elevation of privilege if an attacker can access sensitive registry information.

To learn more about the vulnerability, see Microsoft Security Bulletin MS16-124.

More Information

Important

• If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, get security updates automatically.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

__

Method 3: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Click the download link in Microsoft Security Bulletin MS16-124 that corresponds to the version of Windows that you are running.

More Information

__

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

File Information

__

File hash information

File name	SHA1 hash	SHA256 hash
Windows6.0-KB3191256-ia64.msu	EB3FE8D0796607EE2A8719D386EAE33AD12BB598	02A4A637DEF54089CDB01CBD9FC174D3A06BD77CCA62246F4A0DC25DA47642D2
Windows6.0-KB3191256-x86.msu	70CD54EE34516D3768D0DA0771BF7315373419FF	478241C1D145ADBA557564FB32235E9255E715172E619106D3C5803B45A07FEB
Windows6.0-KB3191256-x64.msu	A1D4776D2D84F2D21ADC0ADEC0DAF5DBA8C1FED2	C0ECAC6673429074A43C91FF1B256391759FD6D6522A5C240FA5E248DBDD6868

__

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows Vista and Windows Server 2008 file informationNotes

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
  Version| Product| Milestone| Service branch
  —|—|—|—
  6.0.600 2.19xxx| Windows Vista or Windows Server 2008| SP2| GDR
  6.0.600 2.23xxx| Windows Vista or Windows Server 2008| SP2| LDR
• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
• The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported ia64-based versionsFile name	File version	File size	Date	Time	Platform	Service branch
Advapi32.dll	6.0.6002.19598	1,964,544	06-Feb-2016	01:39	IA-64	Not applicable
Advapi32.dll	6.0.6002.24020	1,963,520	30-Sep-2016	15:11	IA-64	Not applicable
Csrsrv.dll	6.0.6002.19680	145,920	12-Aug-2016	18:54	IA-64	Not applicable
Csrsrv.dll	6.0.6002.24020	150,016	30-Sep-2016	15:11	IA-64	Not applicable
Ntdll.dll	6.0.6002.19623	2,575,672	21-Mar-2016	22:52	IA-64	Not applicable
Ntdll.dll	6.0.6002.24020	2,551,536	30-Sep-2016	22:53	IA-64	Not applicable
Ntoskrnl.exe	6.0.6002.19697	9,482,984	30-Sep-2016	15:52	IA-64	Not applicable
Ntoskrnl.exe	6.0.6002.24020	9,468,136	30-Sep-2016	15:18	IA-64	Not applicable
Rpcrt4.dll	6.0.6002.19598	3,298,816	06-Feb-2016	01:41	IA-64	Not applicable
Rpcrt4.dll	6.0.6002.24020	3,289,088	30-Sep-2016	15:12	IA-64	Not applicable
Smss.exe	6.0.6002.19598	159,232	06-Feb-2016	00:36	IA-64	Not applicable
Smss.exe	6.0.6002.24020	159,232	30-Sep-2016	14:20	IA-64	Not applicable
Ia32exec.bin	6.5.6524.0	8,262,048	07-May-2014	23:57	Not applicable	IA64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll	6.0.6002.19598	27,648	06-Feb-2016	01:41	IA-64	IA64_MICROSOFT-WINDOWS-WOW
Wow64.dll	6.0.6002.19598	524,288	06-Feb-2016	01:42	IA-64	IA64_MICROSOFT-WINDOWS-WOW
Wow64cpu.dll	6.0.6002.19598	43,008	06-Feb-2016	01:42	IA-64	IA64_MICROSOFT-WINDOWS-WOW
Wow64win.dll	6.0.6002.19598	617,984	06-Feb-2016	01:42	IA-64	IA64_MICROSOFT-WINDOWS-WOW
Wowia32x.dll	6.5.6563.0	88,576	06-Feb-2016	01:42	IA-64	IA64_MICROSOFT-WINDOWS-WOW
Ia32exec.bin	6.5.6524.0	8,262,048	07-Mar-2016	23:41	Not applicable	IA64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll	6.0.6002.24020	27,648	30-Sep-2016	15:12	IA-64	IA64_MICROSOFT-WINDOWS-WOW
Wow64.dll	6.0.6002.24020	524,288	30-Sep-2016	15:13	IA-64	IA64_MICROSOFT-WINDOWS-WOW
Wow64cpu.dll	6.0.6002.24020	43,008	30-Sep-2016	15:13	IA-64	IA64_MICROSOFT-WINDOWS-WOW
Wow64win.dll	6.0.6002.24020	617,984	30-Sep-2016	15:13	IA-64	IA64_MICROSOFT-WINDOWS-WOW
Wowia32x.dll	6.5.6563.0	88,576	30-Sep-2016	15:13	IA-64	IA64_MICROSOFT-WINDOWS-WOW
Ntdll.dll	6.0.6002.19623	1,171,488	21-Mar-2016	22:52	x86	Not applicable
Ntdll.dll	6.0.6002.24020	1,168,392	30-Sep-2016	22:53	x86	Not applicable
Rpcrt4.dll	6.0.6002.19598	679,424	06-Feb-2016	02:12	x86	Not applicable
Rpcrt4.dll	6.0.6002.24020	678,912	30-Sep-2016	15:16	x86	Not applicable
Acwow64.dll	6.0.6002.19598	43,008	06-Feb-2016	02:11	x86	WOW64_MICROSOFT-WINDOWS-WOW
Instnm.exe	6.0.6002.19598	7,680	06-Feb-2016	00:32	x86	WOW64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll	6.0.6002.19598	14,336	06-Feb-2016	02:12	x86	WOW64_MICROSOFT-WINDOWS-WOW
Setup16.exe	3.1.0.1918	26,112	06-Feb-2016	00:32	x86	WOW64_MICROSOFT-WINDOWS-WOW
User.exe	6.0.6002.19598	2,560	06-Feb-2016	00:32	x86	WOW64_MICROSOFT-WINDOWS-WOW
Wow32.dll	6.0.6002.19598	5,120	06-Feb-2016	02:12	x86	WOW64_MICROSOFT-WINDOWS-WOW
Acwow64.dll	6.0.6002.24020	43,008	30-Sep-2016	15:14	x86	WOW64_MICROSOFT-WINDOWS-WOW
Instnm.exe	6.0.6002.24020	7,680	30-Sep-2016	14:18	x86	WOW64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll	6.0.6002.24020	14,336	30-Sep-2016	15:15	x86	WOW64_MICROSOFT-WINDOWS-WOW
Setup16.exe	3.1.0.1918	26,112	30-Sep-2016	14:18	x86	WOW64_MICROSOFT-WINDOWS-WOW
User.exe	6.0.6002.24020	2,560	30-Sep-2016	14:18	x86	WOW64_MICROSOFT-WINDOWS-WOW
Wow32.dll	6.0.6002.24020	5,120	30-Sep-2016	15:16	x86	WOW64_MICROSOFT-WINDOWS-WOW
Advapi32.dll	6.0.6002.19598	802,304	06-Feb-2016	02:11	x86	Not applicable
Advapi32.dll	6.0.6002.24020	802,816	30-Sep-2016	15:14	x86	Not applicable

For all supported x86-based versionsFile name	File version	File size	Date	Time	Platform
Advapi32.dll	6.0.6002.19598	802,304	06-Feb-2016	02:11	x86
Advapi32.dll	6.0.6002.24020	802,816	30-Sep-2016	15:14	x86
Csrsrv.dll	6.0.6002.19680	49,664	12-Aug-2016	18:55	x86
Csrsrv.dll	6.0.6002.24020	49,664	30-Sep-2016	15:14	x86
Ntdll.dll	6.0.6002.19623	1,208,568	21-Mar-2016	22:57	x86
Ntdll.dll	6.0.6002.24020	1,209,080	30-Sep-2016	22:59	x86
Ntkrnlpa.exe	6.0.6002.19697	3,610,344	30-Sep-2016	16:05	Not applicable
Ntoskrnl.exe	6.0.6002.19697	3,557,608	30-Sep-2016	16:05	Not applicable
Ntkrnlpa.exe	6.0.6002.24020	3,613,416	30-Sep-2016	15:22	Not applicable
Ntoskrnl.exe	6.0.6002.24020	3,561,192	30-Sep-2016	15:22	Not applicable
Rpcrt4.dll	6.0.6002.19598	783,872	06-Feb-2016	02:12	x86
Rpcrt4.dll	6.0.6002.24020	783,872	30-Sep-2016	15:15	x86
Smss.exe	6.0.6002.19598	64,000	06-Feb-2016	00:32	x86
Smss.exe	6.0.6002.24020	64,512	30-Sep-2016	14:18	x86

For all supported x64-based versionsFile name	File version	File size	Date	Time	Platform	Service branch
Advapi32.dll	6.0.6002.19598	1,067,008	06-Feb-2016	01:59	x64	Not applicable
Advapi32.dll	6.0.6002.24020	1,067,520	30-Sep-2016	15:35	x64	Not applicable
Csrsrv.dll	6.0.6002.19680	86,016	12-Aug-2016	19:07	x64	Not applicable
Csrsrv.dll	6.0.6002.24020	86,016	30-Sep-2016	15:35	x64	Not applicable
Ntdll.dll	6.0.6002.19623	1,589,168	21-Mar-2016	23:00	x64	Not applicable
Ntdll.dll	6.0.6002.24020	1,583,000	30-Sep-2016	22:55	x64	Not applicable
Ntoskrnl.exe	6.0.6002.19697	4,693,224	30-Sep-2016	16:17	x64	Not applicable
Ntoskrnl.exe	6.0.6002.24020	4,664,552	30-Sep-2016	15:43	x64	Not applicable
Rpcrt4.dll	6.0.6002.19598	1,304,576	06-Feb-2016	02:01	x64	Not applicable
Rpcrt4.dll	6.0.6002.24020	1,308,160	30-Sep-2016	15:36	x64	Not applicable
Smss.exe	6.0.6002.19598	75,264	06-Feb-2016	00:48	x64	Not applicable
Smss.exe	6.0.6002.24020	75,776	30-Sep-2016	14:39	x64	Not applicable
Ntvdm64.dll	6.0.6002.19598	16,896	06-Feb-2016	02:01	x64	AMD64_MICROSOFT-WINDOWS-WOW
Wow64.dll	6.0.6002.19598	234,496	06-Feb-2016	02:02	x64	AMD64_MICROSOFT-WINDOWS-WOW
Wow64cpu.dll	6.0.6002.19598	17,408	06-Feb-2016	02:02	x64	AMD64_MICROSOFT-WINDOWS-WOW
Wow64win.dll	6.0.6002.19598	301,568	06-Feb-2016	02:02	x64	AMD64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll	6.0.6002.24020	16,896	30-Sep-2016	15:36	x64	AMD64_MICROSOFT-WINDOWS-WOW
Wow64.dll	6.0.6002.24020	234,496	30-Sep-2016	15:37	x64	AMD64_MICROSOFT-WINDOWS-WOW
Wow64cpu.dll	6.0.6002.24020	17,408	30-Sep-2016	15:37	x64	AMD64_MICROSOFT-WINDOWS-WOW
Wow64win.dll	6.0.6002.24020	301,568	30-Sep-2016	15:37	x64	AMD64_MICROSOFT-WINDOWS-WOW
Ntdll.dll	6.0.6002.19623	1,171,488	21-Mar-2016	23:00	x86	Not applicable
Ntdll.dll	6.0.6002.24020	1,168,392	30-Sep-2016	22:55	x86	Not applicable
Rpcrt4.dll	6.0.6002.19598	679,424	06-Feb-2016	02:12	x86	Not applicable
Rpcrt4.dll	6.0.6002.24020	678,912	30-Sep-2016	15:16	x86	Not applicable
Acwow64.dll	6.0.6002.19598	43,008	06-Feb-2016	02:11	x86	WOW64_MICROSOFT-WINDOWS-WOW
Instnm.exe	6.0.6002.19598	7,680	06-Feb-2016	00:32	x86	WOW64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll	6.0.6002.19598	14,336	06-Feb-2016	02:12	x86	WOW64_MICROSOFT-WINDOWS-WOW
Setup16.exe	3.1.0.1918	26,112	06-Feb-2016	00:32	x86	WOW64_MICROSOFT-WINDOWS-WOW
User.exe	6.0.6002.19598	2,560	06-Feb-2016	00:32	x86	WOW64_MICROSOFT-WINDOWS-WOW
Wow32.dll	6.0.6002.19598	5,120	06-Feb-2016	02:12	x86	WOW64_MICROSOFT-WINDOWS-WOW
Acwow64.dll	6.0.6002.24020	43,008	30-Sep-2016	15:14	x86	WOW64_MICROSOFT-WINDOWS-WOW
Instnm.exe	6.0.6002.24020	7,680	30-Sep-2016	14:18	x86	WOW64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll	6.0.6002.24020	14,336	30-Sep-2016	15:15	x86	WOW64_MICROSOFT-WINDOWS-WOW
Setup16.exe	3.1.0.1918	26,112	30-Sep-2016	14:18	x86	WOW64_MICROSOFT-WINDOWS-WOW
User.exe	6.0.6002.24020	2,560	30-Sep-2016	14:18	x86	WOW64_MICROSOFT-WINDOWS-WOW
Wow32.dll	6.0.6002.24020	5,120	30-Sep-2016	15:16	x86	WOW64_MICROSOFT-WINDOWS-WOW
Advapi32.dll	6.0.6002.19598	802,304	06-Feb-2016	02:11	x86	Not applicable
Advapi32.dll	6.0.6002.24020	802,816	30-Sep-2016	15:14	x86	Not applicable