MicrosoftKB3204059MS16-144: Cumulative security update for Internet Explorer: December 13, 2016
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
<html><body><p>Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage in Internet Explorer.</p><h2>Summary</h2><div> This security update resolves several reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code execution if a user views a specially crafted webpage in Internet Explorer. To learn more about the vulnerabilities, see <a href=“https://technet.microsoft.com/library/security/ms16-144” target=“_self”>Microsoft Security Bulletin MS16-144</a>.<span></span></div><h2>How to get and install the update</h2><div><h3>Method 1: Microsoft Update</h3><div>This update is available through Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see the “Turn on automatic updating in Control Panel” section of <a href=“https://www.microsoft.com/security/pc-security/updates.aspx” target=“_self”>this Safety & Security Center article</a>. <br /><br /><span>Note</span> For Windows RT and Windows RT 8.1, this update is available through Microsoft Update only.</div><div><div><div><span><span></span></span><span><span>Method 2: Microsoft Catalog</span></span></div><div><span><div> You can get the stand-alone update package through the Microsoft Download Center. Go to <a href=“https://technet.microsoft.com/library/security/ms16-144” target=“_self”>Microsoft Security Bulletin MS16-144</a> to find the download links for this update. </div><br /></span></div></div></div></div><h2>More Information</h2><div>The following article contains more information about this security update:<ul><li><a href=“https://support.microsoft.com/en-us/help/3208481”>3208481 </a> MS16-144: Security update for Hlink.dll for Internet Explorer: December 13, 2016 </li><li><a href=“https://support.microsoft.com/en-us/help/3204062”>3204062 </a> MS16-145: Cumulative security update for Microsoft Edge: December 13, 2016</li><li><a href=“https://support.microsoft.com/en-us/help/3203621”>3203621 </a> MS16-144: Security update for Internet Explorer: December 13, 2016</li><li><a href=“https://support.microsoft.com/en-us/help/3205408”>3205408 </a> December 2016 Security Only Quality Update for Windows Server 2012 </li><li><a href=“https://support.microsoft.com/en-us/help/3205409”>3205409 </a> December 2016 Security Monthly Quality Rollup for Windows Server 2012 </li><li><a href=“https://support.microsoft.com/en-us/help/3205394”>3205394 </a> December 2016 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1 </li><li><a href=“https://support.microsoft.com/en-us/help/3205397”>3205397 </a> December 2016 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 </li><li><a href=“https://support.microsoft.com/en-us/help/3205400”>3205400 </a> December 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2</li><li><a href=“https://support.microsoft.com/en-us/help/3205401”>3205401 </a> December 2016 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2 </li></ul><br /> <br /> <br /> <br /> <br /> <br /> <br /> Additionally, see <a href=“https://support.microsoft.com/en-sg/help/12387/windows-10-update-history” target=“_self”>Windows 10 and Windows Server 2016 update history</a>.<br /> <br /> <br /> <br /> <br /> <br /> <br /> <div><div><div><span><span></span></span><span><span>Security update deployment information</span></span></div><div><span><div><h4>Windows Vista (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software. <br /><br /><div><table><tr><td><span>Security update file names</span></td><td>For Internet Explorer 9 for all supported 32-bit editions of Windows Vista:<br /><span>IE9-Windows6.0-KB3203621-x86.msu</span></td></tr><tr><td> </td><td>For Internet Explorer 9 for all supported x64-based editions of Windows Vista:<br /><span>IE9-Windows6.0-KB3203621-x64.msu</span></td></tr><tr><td></td><td>For Microsoft Windows Hyperlink Object Library for all supported 32-bit editions of Windows Vista:<br /><span>Windows6.0-KB3208481-x86.msu</span></td></tr><tr><td></td><td>For Microsoft Windows Hyperlink Object Library for all supported x64-based editions of Windows Vista:<br /><span>Windows6.0-KB3208481-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>WUSA.exe does not support uninstall of updates. To uninstall an update installed by WUSA, click <strong>Control Panel</strong>, and then click <strong>Security</strong>. Under Windows Update, click <strong>View installed updates</strong>, and then select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3203621” target=“_self”>Microsoft Knowledge Base article 3203621</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows Server 2008 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software. <br /><br /><div><table><tr><td><span>Security update file names</span></td><td>For Internet Explorer 9 for all supported 32-bit editions of Windows Server 2008:<br /><span>IE9-Windows6.0-KB3203621-x86.msu</span></td></tr><tr><td> </td><td>For Internet Explorer 9 for all supported x64-based editions of Windows Server 2008:<br /><span>IE9-Windows6.0-KB3203621-x64.msu</span></td></tr><tr><td></td><td>For Microsoft Windows Hyperlink Object Library for all supported 32-bit editions of Windows Server 2008:<br /><span>Windows6.0-KB3208481-x86.msu</span></td></tr><tr><td></td><td>For Microsoft Windows Hyperlink Object Library for all supported x64-based editions of Windows Server 2008:<br /><span>Windows6.0-KB3208481-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>WUSA.exe does not support uninstall of updates. To uninstall an update installed by WUSA, click <strong>Control Panel</strong>, and then click <strong>Security</strong>. Under Windows Update, click <strong>View installed updates</strong> and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3203621” target=“_self”>Microsoft Knowledge Base article 3203621</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows 7 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software. <br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 11 for Windows 7 for 32-bit Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB3205394-x86.msu<br /></span>Security Only</td></tr><tr><td> </td><td>For Internet Explorer 11 for Windows 7 for 32-bit Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB3207752-x86.msu<br /></span>Monthly Quality Roll-Up</td></tr><tr><td> </td><td>For Internet Explorer 11 for Windows 7 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1-</span><span>KB3205394-x64.msu <br /></span>Security Only</td></tr><tr><td> </td><td>For Internet Explorer 11 for Windows 7 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB</span><span>KB3207752-x64.msu <br /></span>Monthly Quality Roll-Up</td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base Article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update installed by WUSA, use the <span>/Uninstall</span> setup switch or click <strong>Control Panel</strong>, click <strong>System and Security</strong>, and then under Windows Update, click <strong>View installed updates</strong> and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3205394” target=“_self”>Microsoft Knowledge Base article 3205394</a><br />See <a href=“https://support.microsoft.com/help/3207752” target=“_self”>Microsoft Knowledge Base article 3207752</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows Server 2008 R2 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software. <br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1-</span><span>KB3205394-x64.msu <br /></span>Security Only</td></tr><tr><td> </td><td>For Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems Service Pack 1:<br /><span>IE11-Windows6.1-KB</span><span>KB3207752-x64.msu <br /></span>Monthly Quality Roll-Up</td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update installed by WUSA, use the <span>/Uninstall</span> setup switch or click <strong>Control Panel</strong>, click <strong>System and Security</strong>, and then under Windows Update, click <strong>View installed updates</strong> and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3205394” target=“_self”>Microsoft Knowledge Base article 3205394</a><br />See <a href=“https://support.microsoft.com/help/3207752” target=“_self”>Microsoft Knowledge Base article 3207752</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows 8.1 (all editions) </h4><h5>Reference table</h5>The following table contains the security update information for this software. <br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 11 in all supported 32-bit editions of Windows 8.1:<br /><span>IE11-Windows6.1-KB3205400-x86.msu<br /></span>Security Only</td></tr><tr><td> </td><td>For Internet Explorer 11 in all supported 32-bit editions of Windows 8.1:<br /><span>IE11-Windows6.1-KB3205401-x86.msu<br /></span>Monthly Quality Roll-Up</td></tr><tr><td> </td><td>For Internet Explorer 11 in all supported x64-based editions of Windows 8.1:<br /><span>IE11-Windows6.1-KB3205400-x64.msu <br /></span>Security Only</td></tr><tr><td> </td><td>For Internet Explorer 11 in all supported x64-based editions of Windows 8.1:<br /><span>IE11-Windows6.1-KB3205401-x64.msu <br /></span>Monthly Quality Roll-Up</td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update installed by WUSA, use the <span>/Uninstall</span> setup switch or click <strong>Control Panel</strong>, click <strong>System and Security</strong>, click <strong>Windows Update</strong>, and then under See also, click <strong>Installed updates</strong> and select from the list of updates<span>.</span></td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3205400” target=“_self”>Microsoft Knowledge Base article 3205400</a><br />See <a href=“https://support.microsoft.com/help/3205401” target=“_self”>Microsoft Knowledge Base article 3205401</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows Server 2012 and Windows Server 2012 R2 (all editions) </h4><h5>Reference table</h5>The following table contains the security update information for this software. <br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Internet Explorer 10 in all supported editions of Windows Server 2012:<br /><span>Windows8-RT-KB3205408-x86.msu<br /></span>Security Only</td></tr><tr><td></td><td>For Internet Explorer 10 in all supported editions of Windows Server 2012:<br /><span>Windows8-RT-KB3205409-x86.msu<br /></span>Monthly Quality Roll-Up</td></tr><tr><td> </td><td>For Internet Explorer 11 in all supported editions of Windows Server 2012 R2:<br /><span>Windows8.1-KB3205400-x64.msu <br /></span>Security Only</td></tr><tr><td> </td><td>For Internet Explorer 11 in all supported editions of Windows Server 2012 R2:<br /><span>Windows8.1-KB3205401-x64.msu <br /></span>Monthly Quality Roll-Up</td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update installed by WUSA, use the <span>/Uninstall</span> setup switch or click <strong>Control Panel</strong>, click <strong>System and Security</strong>, click <strong>Windows Update</strong>, and then under See also, click <strong>Installed updates</strong> and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3205408” target=“_self”>Microsoft Knowledge Base article 3205408</a><br />See <a href=“https://support.microsoft.com/help/3205409” target=“_self”>Microsoft Knowledge Base article 3205409</a><br />See <a href=“https://support.microsoft.com/help/3205400” target=“_self”>Microsoft Knowledge Base article 3205400</a><br />See <a href=“https://support.microsoft.com/help/3205401” target=“_self”>Microsoft Knowledge Base article 3205401</a></td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><h4>Windows RT 8.1 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software. <br /><br /><div><table><tr><td><span>Deployment</span></td><td>This update is available through <a href=“http://go.microsoft.com/fwlink/?linkid=21130” target=“_self”>Windows Update</a>.</td></tr><tr><td><span>Restart Requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal Information</span></td><td>Click <strong>Control Panel</strong>, click <strong>System and Security</strong>, click <strong>Windows Update</strong>, and then under See also, click <strong>Installed updates</strong>. and then select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>Not applicable</td></tr></table></div><h4>Windows 10 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software. <div><table><tr><td><span>Security update file name</span></td><td>For all supported 32-bit editions of Windows 10:<br /><span>Windows10.0-KB3205383-x86.msu</span></td></tr><tr><td></td><td>For all supported x64-based editions of Windows 10:<br /><span>Windows10.0-KB</span><span>3205383</span><span>-x64.msu</span></td></tr><tr><td></td><td>For all supported 32-bit editions of Windows 10 Version 1511:<br /><span>Windows10.0-KB3205386-x86.msu</span></td></tr><tr><td></td><td>For all supported x64-based editions of Windows 10 Version 1511:<br /><span>Windows10.0-KB</span><span>3205386</span><span>-x64.msu</span></td></tr><tr><td></td><td>For all supported 32-bit editions of Windows 10 Version 1607:<br /><span>Windows10.0-KB3206632-x86.msu</span></td></tr><tr><td></td><td>For all supported x64-based editions of Windows 10 Version 1607:<br /><span>Windows10.0-KB</span><span>3206632</span><span>-x64.msu</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/934307” target=“_self”>Microsoft Knowledge Base article 934307</a></td></tr><tr><td><span>Restart requirement</span></td><td>A system restart is required after you apply this security update.</td></tr><tr><td><span>Removal information</span></td><td>To uninstall an update installed by WUSA, use the <span>/Uninstall</span> setup switch or click <strong>Control Panel</strong>, click <strong>System and Security</strong>, click <strong>Windows Update</strong>, and then under See also, click <strong>Installed updates</strong> and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td> <br /> <br /> <br /> See <a href=“https://support.microsoft.com/en-sg/help/12387/windows-10-update-history” target=“_self”>Windows 10 and Windows Server 2016 update history</a>.<br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> </td></tr><tr><td><span>Registry key verification</span></td><td><span>Note</span> A registry key does not exist to validate the presence of this update.</td></tr></table></div><br /></div><br /></span></div></div></div><div><div><div><span><span></span></span><span><span>How to get help and support for this security update</span></span></div><div><span><div>Help for installing updates: <a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br /> Security solutions for IT professionals: <a href=“https://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br /> Help for protecting your Windows-based computer from viruses and malware: <a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country: <a href target=“_self”>International Support</a></div><br /></span></div></div></div></div></body></html>
Related
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C