MS17-006: Cumulative security update for Internet Explorer: March 14, 2017

2017-03-1400:00:00

Microsoft

support.microsoft.com

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

JSON

<html><body><p>Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage in Internet Explorer.</p><h2>Summary</h2> This security update resolves several reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code execution if a user views a specially crafted webpage in Internet Explorer. To learn more about the vulnerabilities, see <a href=“https://technet.microsoft.com/library/security/MS17-006” target>Microsoft Security Bulletin MS17-006</a>.<h2>How to get and install the update</h2><h3>Method 1: Microsoft Update</h3><div>This update is available through Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. </div><div><br /></div><div>For more information about how to get security updates automatically, see the “Turn on automatic updating in Control Panel” section of <a href=“https://www.microsoft.com/security/pc-security/updates.aspx” target=“_self”>this Safety & Security Center article</a>. <br /><br /><span>Note</span> For Windows RT and Windows RT 8.1, this update is available through Microsoft Update only.</div><span><br /></span><span></span><div><span></span><h3>Method 2: Microsoft Catalog</h3>You can get the stand-alone update package through the Microsoft Catalog. Go to <a href=“https://technet.microsoft.com/library/security/MS17-006” target>Microsoft Security Bulletin MS17-006</a> to find the download links for this update.</div><h2>More information</h2><p><span>The following articles contain more information about this security update: </span></p><ul><li><a href></a><a href=“https://support.microsoft.com/en-us/help/4012204” target=“_blank”>4012204</a> MS17-006: Description of the security update for Internet Explorer: March 14, 2017</li><li><a href></a><a href=“https://support.microsoft.com/en-us/help/3218362” target=“_blank”>3218362</a>

MS17-006: Description of the security update for Internet Messaging API on Windows Vista and Windows Server 2008 R2: March 14, 2017

</li><li><a href></a><a href=“https://support.microsoft.com/en-us/help/4013071” target=“_blank”>4013071</a> MS17-007: Cumulative security update for Microsoft Edge: March 14, 2017</li><li><a href></a><a href=“https://support.microsoft.com/en-us/help/4012217” target=“_blank”>4012217</a> March 2017 Security Monthly Quality Rollup for Windows Server 2012</li><li><a href></a><a href=“https://support.microsoft.com/en-us/help/4012216” target=“_blank”>4012216</a> March 2017 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2</li><li><a href></a><a href=“https://support.microsoft.com/en-us/help/4012215” target=“_blank”>4012215</a> March 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1</li></ul><p>Additionally, see <a href=“https://support.microsoft.com/en-sg/help/12387/windows-10-update-history” target=“_self”>Windows 10 and Windows Server 2016 update history</a>.<br /> </p><div><div><div><div><span><span></span></span><span><span>How to get help and support for this security update</span></span></div><div><div>Help for installing updates: <a href=“https://support.microsoft.com/ph/6527” target=“_self”>Windows Update: FAQ</a><br /><br />Security solutions for IT professionals: <a href=“https://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Support and Troubleshooting</a><br /><br />Help for protecting your Windows-based computer from viruses and malware: <a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Microsoft Secure</a><br /><br />Local support according to your country: <a href=“https://www.microsoft.com/en-us/locale.aspx” target=“_self”>International Support</a></div></div></div></div></div><h2>Security update deployment information</h2><h3>Windows Vista (all editions)</h3><h4>Reference table</h4><h4>The following table contains the security update information for this software.</h4><table><tbody><tr><td width=“26%”><p>Security update file names</p></td><td width=“73%”><p>For Internet Explorer 9 for all supported 32-bit editions of Windows Vista:<br />IE9-Windows6.0-KB4012204-x86.msu</p></td></tr><tr><td width=“26%”><p> </p></td><td width=“73%”><p>For Microsoft Internet Messaging API on all supported 32-bit editions of Windows Vista<br />Windows6.0-KB3218362-x86.msu</p></td></tr><tr><td width=“26%”><p> </p></td><td width=“73%”><p>For Internet Explorer 9 for all supported x64-based editions of Windows Vista:<br />IE9-Windows6.0-KB4012204-x64.msu</p></td></tr><tr><td width=“26%”><p> </p></td><td width=“73%”><p>For Microsoft Internet Messaging API on all supported x64-based editions of Windows Vista<br />Windows6.0-KB3218362-x64.msu</p></td></tr><tr><td width=“26%”><p>Installation switches</p></td><td width=“73%”><p>See <a href=“https://support.microsoft.com/kb/934307”><u>Microsoft Knowledge Base article 934307</u></a></p></td></tr><tr><td width=“26%”><p>Restart requirement</p></td><td width=“73%”><p>A system restart is required after you apply this security update.</p></td></tr><tr><td width=“26%”><p>Removal information</p></td><td width=“73%”><p>WUSA.exe does not support uninstall of updates. To uninstall an update installed by WUSA, click Control Panel, and then click Security. Under “Windows Update,” click View installed updates, and then select from the list of updates.</p></td></tr><tr><td width=“26%”><p>File information</p></td><td width=“73%”><p>See <a href=“https://support.microsoft.com/kb/4012204”><u>Microsoft Knowledge Base article 4012204</u></a></p></td></tr><tr><td width=“26%”><p>Registry key verification</p></td><td width=“73%”><p>Note A registry key does not exist to validate the presence of this update.</p></td></tr></tbody></table><p> </p><h3>Windows Server 2008 (all editions)</h3><p>Reference table</p><p>The following table contains the security update information for this software.</p><table><tbody><tr><td width=“26%”><p>Security update file names</p></td><td width=“73%”><p>For Internet Explorer 9 for all supported 32-bit editions of Windows Server 2008:<br />IE9-Windows6.0-KB4012204-x86.msu</p></td></tr><tr><td width=“26%”><p> </p></td><td width=“73%”><p>For Microsoft Internet Messaging API on all supported 32-bit editions of Windows Server 2008<br />Windows6.0-KB3218362-x86.msu</p></td></tr><tr><td width=“26%”><p> </p></td><td width=“73%”><p>For Internet Explorer 9 for all supported x64-based editions of Windows Server 2008:<br />IE9-Windows6.0-KB4012204-x64.msu</p></td></tr><tr><td width=“26%”><p> </p></td><td width=“73%”><p>For Microsoft Internet Messaging API on all supported x64-based editions of Windows Server 2008<br />Windows6.0-KB3218362-x64.msu</p></td></tr><tr><td width=“26%”><p>Installation switches</p></td><td width=“73%”><p>See <a href=“https://support.microsoft.com/kb/934307”><u>Microsoft Knowledge Base article 934307</u></a></p></td></tr><tr><td width=“26%”><p>Restart requirement</p></td><td width=“73%”><p>A system restart is required after you apply this security update.</p></td></tr><tr><td width=“26%”><p>Removal information</p></td><td width=“73%”><p>WUSA.exe does not support uninstall of updates. To uninstall an update installed by WUSA, click Control Panel, and then click Security. Under “Windows Update,” click View installed updates, and then select from the list of updates.</p></td></tr><tr><td width=“26%”><p>File information</p></td><td width=“73%”><p>See <a href=“https://support.microsoft.com/kb/4012204”><u>Microsoft Knowledge Base article 4012204</u></a></p></td></tr><tr><td width=“26%”><p>Registry key verification</p></td><td width=“73%”><p>Note A registry key does not exist to validate the presence of this update.</p></td></tr></tbody></table><p> </p><p><b>Note</b> For Windows 7 and later versions of Windows, the monthly rollups and the updates for Windows 10 for Internet Explorer are the same as the updates for all Windows bulletins.<span></span></p><h3>Windows 7 (all editions)</h3><h4>Reference table</h4><p>The following table contains the security update information for this software.</p><table><tbody><tr><td width=“26%”><p>Security update file name</p></td><td width=“73%”><p>For Internet Explorer 11 for Windows 7 for 32-bit Systems Service Pack 1:<br />IE11-Windows6.1-KB4012204-X86.msu<br />Security only</p></td></tr><tr><td width=“26%”><p> </p></td><td width=“73%”><p>For Internet Explorer 11 for Windows 7 for 32-bit Systems Service Pack 1:<br />Windows6.1-KB4012215-x86.msu<br />Monthly rollup</p></td></tr><tr><td width=“26%”><p> </p></td><td width=“73%”><p>For Internet Explorer 11 for Windows 7 for x64-based Systems Service Pack 1:<br />IE11-Windows6.1-KB4012204-X64.msu <br />Security only</p></td></tr><tr><td width=“26%”><p> </p></td><td width=“73%”><p>For Internet Explorer 11 for Windows 7 for x64-based Systems Service Pack 1:<br />Windows6.1-KB4012215-x64.msu<br />Monthly rollup</p></td></tr><tr><td width=“26%”><p>Installation switches</p></td><td width=“73%”><p>See <a href=“https://support.microsoft.com/kb/934307”><u>Microsoft Knowledge Base article 934307</u></a></p></td></tr><tr><td width=“26%”><p>Restart requirement</p></td><td width=“73%”><p>A system restart is required after you apply this security update.</p></td></tr><tr><td width=“26%”><p>Removal information</p></td><td width=“73%”><p>To uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click View installed updates under “Windows Update,” and then select from the list of updates.</p></td></tr><tr><td width=“26%”><p>File information</p></td><td width=“73%”><p>See <a href=“https://support.microsoft.com/kb/4012204”><u>Microsoft Knowledge Base article 4012204</u></a><br />See <a href=“https://support.microsoft.com/kb/4012215”><u>Microsoft Knowledge Base article 4012215</u></a></p></td></tr><tr><td width=“26%”><p>Registry key verification</p></td><td width=“73%”><p>Note A registry key does not exist to validate the presence of this update.</p></td></tr></tbody></table><p> </p><h3>Windows Server 2008 R2 (all editions)</h3><h4>Reference table</h4><p>The following table contains the security update information for this software.</p><table><tbody><tr><td width=“25%”><p>Security update file name</p></td><td width=“74%”><p>For Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems Service Pack 1:<br />IE11-Windows6.1-KB4012204-X64.msu <br />Security only</p></td></tr><tr><td width=“25%”><p> </p></td><td width=“74%”><p>For Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems Service Pack 1:<br />Windows6.1-KB4012215-x64.msu<br />Monthly rollup</p></td></tr><tr><td width=“25%”><p>Installation switches</p></td><td width=“74%”><p>See <a href=“https://support.microsoft.com/kb/934307”><u>Microsoft Knowledge Base article 934307</u></a></p></td></tr><tr><td width=“25%”><p>Restart requirement</p></td><td width=“74%”><p>A system restart is required after you apply this security update.</p></td></tr><tr><td width=“25%”><p>Removal information</p></td><td width=“74%”><p>To uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click View installed updates under “Windows Update,” and then select from the list of updates.</p></td></tr><tr><td width=“25%”><p>File information</p></td><td width=“74%”><p>See <a href=“https://support.microsoft.com/kb/4012204”><u>Microsoft Knowledge Base article 4012204</u></a><br />See <a href=“https://support.microsoft.com/kb/4012215”><u>Microsoft Knowledge Base article 4012215</u></a></p></td></tr><tr><td width=“25%”><p>Registry key verification</p></td><td width=“74%”><p>Note A registry key does not exist to validate the presence of this update.</p></td></tr></tbody></table><p> </p><h3>Windows 8.1 (all editions) </h3><h4>Reference table</h4><p>The following table contains the security update information for this software.</p><table><tbody><tr><td width=“25%”><p>Security update file name</p></td><td width=“74%”><p>For Internet Explorer 11 in all supported 32-bit editions of Windows 8.1:<br />Windows8.1-KB4012204-x86.msu<br />Security only</p></td></tr><tr><td width=“25%”><p> </p></td><td width=“74%”><p>For Internet Explorer 11 in all supported 32-bit editions of Windows 8.1:<br />Windows8.1-KB4012216-x86.msu<br />Monthly rollup</p></td></tr><tr><td width=“25%”><p> </p></td><td width=“74%”><p>For Internet Explorer 11 in all supported x64-based editions of Windows 8.1:<br />Windows8.1-KB4012204-x64.msu <br />Security only</p></td></tr><tr><td width=“25%”><p> </p></td><td width=“74%”><p>For Internet Explorer 11 in all supported x64-based editions of Windows 8.1:<br />Windows8.1-KB4012216-x64.msu<br />Monthly rollup</p></td></tr><tr><td width=“25%”><p>Installation switches</p></td><td width=“74%”><p>See <a href=“https://support.microsoft.com/kb/934307”><u>Microsoft Knowledge Base article 934307</u></a></p></td></tr><tr><td width=“25%”><p>Restart requirement</p></td><td width=“74%”><p>A system restart is required after you apply this security update.</p></td></tr><tr><td width=“25%”><p>Removal information</p></td><td width=“74%”><p>To uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, click Installed updates under “See also,” and then select from the list of updates.</p></td></tr><tr><td width=“25%”><p>File information</p></td><td width=“74%”><p>See <a href=“https://support.microsoft.com/kb/4012204”><u>Microsoft Knowledge Base article 4012204</u></a><br />See <a href=“https://support.microsoft.com/kb/4012216”><u>Microsoft Knowledge Base article 4012216</u></a></p></td></tr><tr><td width=“25%”><p>Registry key verification</p></td><td width=“74%”><p>Note A registry key does not exist to validate the presence of this update.</p></td></tr></tbody></table><p> </p><h3>Windows Server 2012 and Windows Server 2012 R2 (all editions)</h3><h4>Reference table</h4><p>The following table contains the security update information for this software.</p><table><tbody><tr><td width=“26%”><p>Security update file name</p></td><td width=“73%”><p>For Internet Explorer 10 in all supported editions of Windows Server 2012:<br />Windows8-RT-KB4012204-x64.msu <br />Security only</p></td></tr><tr><td width=“26%”><p> </p></td><td width=“73%”><p>For Internet Explorer 10 in all supported editions of Windows Server 2012:<br />Windows8-RT-KB4012217-x64.msu<br />Monthly rollup</p></td></tr><tr><td width=“26%”><p><span> </span></p></td><td width=“73%”><p><span>For Internet Explorer 11 in all supported editions of Windows Server 2012 R2:<br />Windows8.1-KB4012204-x64.msu <br />Security only</span></p></td></tr><tr><td width=“26%”><p><span> </span></p></td><td width=“73%”><p><span>For Internet Explorer 11 in all supported editions of Windows Server 2012 R2:<br />Windows8.1-KB4012216-x64.msu<br />Monthly rollup</span></p></td></tr><tr><td width=“26%”><p>Installation switches</p></td><td width=“73%”><p>See <a href=“https://support.microsoft.com/kb/934307”><u>Microsoft Knowledge Base article 934307</u></a></p></td></tr><tr><td width=“26%”><p>Restart requirement</p></td><td width=“73%”><p>A system restart is required after you apply this security update.</p></td></tr><tr><td width=“26%”><p>Removal information</p></td><td width=“73%”><p>To uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, click Installed updates under “See also,” and then select from the list of updates.</p></td></tr><tr><td width=“26%”><p>File information</p></td><td width=“73%”><p>See <a href=“https://support.microsoft.com/kb/4012204”><u>Microsoft Knowledge Base article 4012204</u></a><br />See <a href=“https://support.microsoft.com/kb/4012217”><u>Microsoft Knowledge Base article 4012217</u></a><br />See <a href=“https://support.microsoft.com/kb/4012216”><u>Microsoft Knowledge Base article 4012216</u></a></p></td></tr><tr><td width=“26%”><p>Registry key verification</p></td><td width=“73%”><p>Note A registry key does not exist to validate the presence of this update.</p></td></tr></tbody></table><p> </p><h3>Windows RT 8.1 (all editions)</h3><h4>Reference table</h4><p>The following table contains the security update information for this software.</p><table><tbody><tr><td width=“25%”><p>Deployment</p></td><td width=“74%”><p>The 4012216 monthly rollup update is available via <a href=“http://go.microsoft.com/fwlink/?LinkId=21130”><u>Windows Update</u></a> only.</p></td></tr><tr><td width=“25%”><p>Restart requirement</p></td><td width=“74%”><p>A system restart is required after you apply this security update.</p></td></tr><tr><td width=“25%”><p>Removal information</p></td><td width=“74%”><p>Click Control Panel, click System and Security, click Windows Update, click Installed updates under “See also,” and then select from the list of updates.</p></td></tr><tr><td width=“25%”><p>File information</p></td><td width=“74%”><p>Not applicable</p></td></tr></tbody></table><p> </p><h3>Windows 10 (all editions)</h3><h4>Reference table</h4><p>The following table contains the security update information for this software.</p><table><tbody><tr><td width=“30%”><p>Security update file name</p></td><td width=“70%”><p>For all supported 32-bit editions of Windows 10:<br />Windows10.0-KB4012606-x86.msu</p></td></tr><tr><td width=“30%”><p> </p></td><td width=“70%”><p>For all supported x64-based editions of Windows 10:<br />Windows10.0-KB4012606-x64.msu</p></td></tr><tr><td width=“30%”><p> </p></td><td width=“70%”><p>For all supported 32-bit editions of Windows 10 Version 1511:<br />Windows10.0-KB4013198-x86.msu</p></td></tr><tr><td width=“30%”><p> </p></td><td width=“70%”><p>For all supported x64-based editions of Windows 10 Version 1511:<br />Windows10.0-KB4013198-x64.msu</p></td></tr><tr><td width=“30%”><p> </p></td><td width=“70%”><p>For all supported 32-bit editions of Windows 10 Version 1607:<br />Windows10.0-KB4013429-x86.msu</p></td></tr><tr><td width=“30%”><p> </p></td><td width=“70%”><p>For all supported x64-based editions of Windows 10 Version 1607:<br />Windows10.0-KB4013429-x64.msu</p></td></tr><tr><td width=“30%”><p>Installation switches</p></td><td width=“70%”><p>See <a href=“https://support.microsoft.com/kb/934307”><u>Microsoft Knowledge Base article 934307</u></a></p></td></tr><tr><td width=“30%”><p>Restart requirement</p></td><td width=“70%”><p>A system restart is required after you apply this security update.</p></td></tr><tr><td width=“30%”><p>Removal information</p></td><td width=“70%”><p>To uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, click Installed updates under “See also,” and then select from the list of updates.</p></td></tr><tr><td width=“30%”><p>File information</p></td><td width=“70%”><p>See <a href=“https://support.microsoft.com/en-sg/help/12387/windows-10-update-history” target=“_self”><u>Windows 10 and Windows Server 2016 update history</u></a>.</p></td></tr><tr><td width=“30%”><p>Registry key verification</p></td><td width=“70%”><p>Note A registry key does not exist to validate the presence of this update.</p></td></tr></tbody></table><p> </p><h3>Windows Server 2016 (all editions)</h3><h4>Reference table</h4><p>The following table contains the security update information for this software.</p><table><tbody><tr><td width=“30%”><p>Security update file name</p></td><td width=“70%”><p>For all supported editions of Windows Server 2016:<br />Windows10.0-KB4013429-x64.msu</p></td></tr><tr><td width=“30%”><p>Installation switches</p></td><td width=“70%”><p>See <a href=“https://support.microsoft.com/kb/934307”><u>Microsoft Knowledge Base article 934307</u></a></p></td></tr><tr><td width=“30%”><p>Restart requirement</p></td><td width=“70%”><p>A system restart is required after you apply this security update.</p></td></tr><tr><td width=“30%”><p>Removal information</p></td><td width=“70%”><p>To uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, click Installed updates under “See also,” and then select from the list of updates.</p></td></tr><tr><td width=“30%”><p>File information</p></td><td width=“70%”><p>See <a href=“https://support.microsoft.com/en-sg/help/12387/windows-10-update-history” target=“_self”><u>Windows 10 and Windows Server 2016 update history</u></a>.</p></td></tr><tr><td width=“30%”><p>Registry key verification</p></td><td width=“70%”><p>Note A registry key does not exist to validate the presence of this update.</p></td></tr></tbody></table><div><div><div><p><br /></p></div></div></div></body></html>