6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
77.5%
<html><body><p>Resolves a vulnerability in Windows that could allow elevation of privilege if a user clicks a specially crafted URL which is hosted by an affected Microsoft IIS server.</p><h2>Summary</h2><div>This security update resolves a vulnerability in Microsoft IIS Server. The vulnerability could allow elevation of privilege if a user clicks a specially crafted URL that is hosted by an affected Microsoft IIS server. An attacker who successfully exploited this vulnerability could potentially execute scripts in the userβs browser to obtain information from web sessions.<br />To learn more about the vulnerability, see <a href=βhttps://technet.microsoft.com/library/security/MS17-016β target=β_selfβ>Microsoft Security Bulletin MS17-016</a>. </div><h2>More Information</h2><div><span>Important <br /><br /></span><ul><li>All future security and non-security updates for Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 require update <a href=βhttps://support.microsoft.com/en-us/help/2919355β target=β_selfβ>2919355</a> to be installed. We recommend that you install update <a href=βhttps://support.microsoft.com/en-us/help/2919355β target=β_selfβ>2919355</a> on your Windows RT 8.1-based, Windows 8.1-based, or Windows Server 2012 R2-based computer so that you receive future updates. </li><li>If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see <a href=βhttps://technet.microsoft.com/en-us/library/hh825699β target=β_selfβ>Add language packs to Windows</a>. </li></ul></div><h2>Additional information about this security update</h2><div><div>The following articles contain more information about this security update as it relates to individual product versions. These articles may contain known issue information.</div><br /><ul><li><a href=βhttps://support.microsoft.com/en-us/help/4012373β target> 4012373</a> MS17-016: Description of the security update for Internet Information Services: March 14, 2017</li><li><a href=βhttps://support.microsoft.com/en-us/help/4012216β target> 4012216</a> March 2017 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2</li><li><a href=βhttps://support.microsoft.com/en-us/help/4012213β target> 4012213</a> March 2017 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2</li><li><a href=βhttps://support.microsoft.com/en-us/help/4012217β target> 4012217</a> March 2017 Security Monthly Quality Rollup for Windows Server 2012</li><li><a href=βhttps://support.microsoft.com/en-us/help/4012214β target> 4012214</a> March 2017 Security Only Quality Update for Windows Server 2012</li><li><a href=βhttps://support.microsoft.com/en-us/help/4012215β target> 4012215</a> March 2017 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1</li><li><a href=βhttp://support.microsoft.com/kb/4012212β target> 4012212</a> March 2017 Security Only Quality Update for Windows 7 SP1 and Windows Server 2008 R2 SP1</li><li><a href=βhttps://support.microsoft.com/en-us/help/4013429β target> 4013429</a> March 13, 2017βKB4013429 (OS Build 933)</li><li><a href=βhttps://support.microsoft.com/en-us/help/4012606β target> 4012606</a> March 14, 2017βKB4012606 (OS Build 17312)</li><li><a href=βhttps://support.microsoft.com/en-us/help/4013198β target> 4013198</a> March 14, 2017βKB4013198 (OS Build 830)</li></ul> </div><h2>Security update deployment</h2><p><span> </span></p><h3><strong>Windows Vista (all editions)</strong></h3><p><strong>Reference table</strong></p><p>The following table contains the security update information for this software.</p><table><tbody><tr><td width=β26%β><p><strong>Security update file names</strong></p></td><td width=β73%β><p>For all supported 32-bit editions of Windows Vista:<br /><strong>Windows6.0-KB4012373-x86.msu</strong></p></td></tr><tr><td width=β26%β><p>Β </p></td><td width=β73%β><p>For all supported x64-based editions of Windows Vista:<br /><strong>Windows6.0-KB4012373-x64.msu</strong></p></td></tr><tr><td width=β26%β><p><strong>Installation switches</strong></p></td><td width=β73%β><p>See <a href=βhttps://support.microsoft.com/kb/934307β><u>Microsoft Knowledge Base article 934307</u></a></p></td></tr><tr><td width=β26%β><p><strong>Restart requirement</strong></p></td><td width=β73%β><p>A system restart is required after you apply this security update.</p></td></tr><tr><td width=β26%β><p><strong>Removal information</strong></p></td><td width=β73%β><p>WUSA.exe does not support uninstall of updates. To uninstall an update installed by WUSA, click <strong>Control Panel</strong>, and then click <strong>Security</strong>. Under βWindows Update,β click <strong>View installed updates</strong>, and then select from the list of updates.</p></td></tr><tr><td width=β26%β><p><strong>File information</strong></p></td><td width=β73%β><p>See <a href=βhttps://support.microsoft.com/kb/4012373β><u>Microsoft Knowledge Base article 4012373</u></a></p></td></tr><tr><td width=β26%β><p><strong>Registry key verification</strong></p></td><td width=β73%β><p><strong>Note</strong> A registry key does not exist to validate the presence of this update.</p></td></tr></tbody></table><p>Β </p><h3><strong>Windows Server 2008 (all editions)</strong></h3><p><strong>Reference table</strong></p><p>The following table contains the security update information for this software.</p><table><tbody><tr><td width=β26%β><p><strong>Security update file names</strong></p></td><td width=β73%β><p>For all supported 32-bit editions of Windows Server 2008:<br /><strong>Windows6.0-KB4012373-x86.msu</strong></p></td></tr><tr><td width=β26%β><p>Β </p></td><td width=β73%β><p>For all supported x64-based editions of Windows Server 2008:<br /><strong>Windows6.0-KB4012373-x64.msu</strong></p></td></tr><tr><td width=β26%β><p>Β </p></td><td width=β73%β><p>For all supported Itanium-based editions of Windows Server 2008<br /><strong>Windows6.0-KB4012373-ia64.msu</strong></p></td></tr><tr><td width=β26%β><p><strong>Installation switches</strong></p></td><td width=β73%β><p>See <a href=βhttps://support.microsoft.com/kb/934307β><u>Microsoft Knowledge Base article 934307</u></a></p></td></tr><tr><td width=β26%β><p><strong>Restart requirement</strong></p></td><td width=β73%β><p>A system restart is required after you apply this security update.</p></td></tr><tr><td width=β26%β><p><strong>Removal information</strong></p></td><td width=β73%β><p>WUSA.exe does not support uninstall of updates. To uninstall an update installed by WUSA, click <strong>Control Panel</strong>, and then click <strong>Security</strong>. Under βWindows Update,β click <strong>View installed updates</strong>, and then select from the list of updates.</p></td></tr><tr><td width=β26%β><p><strong>File information</strong></p></td><td width=β73%β><p>See <a href=βhttps://support.microsoft.com/kb/4012373β><u>Microsoft Knowledge Base article 4012373</u></a></p></td></tr><tr><td width=β26%β><p><strong>Registry key verification</strong></p></td><td width=β73%β><p><strong>Note</strong> A registry key does not exist to validate the presence of this update.</p></td></tr></tbody></table><h2>More Information</h2><div><div><div><div><span><span></span></span><span><span>How to get help and support for this security update</span></span></div><div><div>Help for installing updates: <a href=βhttps://support.microsoft.com/ph/6527β target=β_selfβ>Windows Update: FAQ</a><br /><br />Security solutions for IT professionals: <a href=βhttps://technet.microsoft.com/security/bb980617.aspxβ target=β_selfβ>TechNet Security Support and Troubleshooting</a><br /><br />Help for protecting your Windows-based computer from viruses and malware: <a href=βhttps://support.microsoft.com/contactus/cu_sc_virsec_masterβ target=β_selfβ>Microsoft Secure</a><br /><br />Local support according to your country: <a href=βhttps://www.microsoft.com/en-us/locale.aspxβ target=β_selfβ>International Support</a></div></div></div></div></div></body></html>
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
77.5%