Lucene search

K
mskbMicrosoftKB4012584
HistoryMar 14, 2017 - 7:00 a.m.

MS17-013: Description of the security update for Microsoft Graphics Component: March 14, 2017

2017-03-1407:00:00
Microsoft
support.microsoft.com
24

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

High

EPSS

0.141

Percentile

95.8%

MS17-013: Description of the security update for Microsoft Graphics Component: March 14, 2017

Summary

This security update resolves vulnerabilities in the Microsoft Graphics Component in Microsoft Windows. These vulnerabilities could allow information disclosure in Microsoft Color Management if a user either visits a specially crafted website or opens a specially crafted document. To learn more about the vulnerability, see Microsoft Security Bulletin MS17-013.Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install this update

Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Update deployment information

For deployment information about this update, see Microsoft Knowledge Base Article 4013075.

Update removal information

We do not recommend that you remove any security update.To remove this update, use the Programs and Features item in Control Panel.

Update restart information

This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.

Update replacement information

This update does not replace any previously released update.

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows Vista and Windows Server 2008 file information

__

For all supported ia64-based versions

File name SHA1 hash SHA256 hash
Windows6.0-KB4012584-ia64.msu B9C73F2D0413FF80A7B9E03BDCD222F14E75ADA6 74CA5D142E5739EEAAFFC5E034F008883B361368E3973C01733CF7F665E3483E
Windows6.0-KB4012584-x64.msu A6EA0FABA565892F105C5710710B11BD5885C016 BCC82342DA21FF15F4683F40A3D901BE09AFFCDA83F520D2D9B12C8BF52312F1
Windows6.0-KB4012584-x86.msu 87CE4EE028FE72345F36FF6EA7BBB710BB09DA06 C64787B7F58F62CC284E5803AC494AD15A434A629864F61FC69AC1675BCCA355

__

For all supported x64-based versions

File name File version File size Date Time Platform
Icm32.dll 6.0.6002.19741 772,096 09-Feb-2017 16:51 IA-64
Mscms.dll 6.0.6002.18005 1,190,400 11-Apr-2009 06:59 IA-64
Wcspluginservice.dll 6.0.6002.19741 80,896 09-Feb-2017 16:53 IA-64
Icm32.dll 6.0.6002.24065 772,096 09-Feb-2017 16:16 IA-64
Mscms.dll 6.0.6002.24065 1,190,400 09-Feb-2017 16:16 IA-64
Wcspluginservice.dll 6.0.6002.24065 80,896 09-Feb-2017 16:17 IA-64
Icm32.dll 6.0.6002.19741 215,040 09-Feb-2017 17:04 x86
Mscms.dll 6.0.6002.18005 391,680 11-Apr-2009 06:28 x86
Wcspluginservice.dll 6.0.6000.16386 32,256 02-Nov-2006 09:46 x86
Icm32.dll 6.0.6002.24065 215,040 09-Feb-2017 16:25 x86
Mscms.dll 6.0.6002.24065 391,680 09-Feb-2017 16:26 x86
Wcspluginservice.dll 6.0.6002.24065 32,256 09-Feb-2017 16:26 x86

How to obtain help and support for this security updateHelp for installing updates: Windows Update FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

7.1

Confidence

High

EPSS

0.141

Percentile

95.8%