Lucene search

K
mskbMicrosoftKB4018821
HistoryMay 09, 2017 - 7:00 a.m.

Security Update for the Windows Kernel Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017

2017-05-0907:00:00
Microsoft
support.microsoft.com
15

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

47.6%

Security Update for the Windows Kernel Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017

Summary

An information disclosure vulnerability exists when the Windows kernel handles objects in memory incorrectly. An attacker who successfully exploits this vulnerability could obtain information to further compromise the user’s system.

To learn more about the vulnerability, go to CVE-2017-0220.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: May 9, 2017

More Information

__

How to obtain help and support for this security update

Help for installing updates: Windows Update FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

__

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB4018821-ia64.msu B8ECB73E699059F0F5C79E745E86CD34AA168A5D D2B5077D87A39B40833961529E3ED45FA68C0E063CDFA4B3502FFF15178F041D
Windows6.0-KB4018821-x64.msu 7FC26196E33CADEE355BE64D64386F180C786DFE 78A34D40A2B3C7DE99D4860DB1EA47FC718377A90C2F069F63B482F92B406DD5
Windows6.0-KB4018821-x86.msu FD7962C2823A878BC2F8EBCE54FED2320AA47BB6 C0955D29940AED39E34B561596886FB5AFDCA065238F94F413F208C2224C835B

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows Vista and Windows Server 2008 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

__

For all supported ia64-based versions

File name File version File size Date Time Platform
Tdx.sys 6.0.6002.19762 229,376 04-Apr-2017 14:41 IA-64
Tdx.sys 6.0.6002.24087 229,376 05-Apr-2017 14:39 IA-64
Afd.sys 6.0.6002.19762 985,088 04-Apr-2017 14:42 IA-64
Afd.sys 6.0.6002.24087 985,600 05-Apr-2017 14:40 IA-64

__

For all supported x64-based versions

File name File version File size Date Time Platform
Tdx.sys 6.0.6002.19762 94,720 04-Apr-2017 14:58 x64
Tdx.sys 6.0.6002.24087 94,720 05-Apr-2017 14:59 x64
Afd.sys 6.0.6002.19762 404,992 04-Apr-2017 14:59 x64
Afd.sys 6.0.6002.24087 404,992 05-Apr-2017 15:00 x64

__

For all supported x86-based versions

File name File version File size Date Time Platform
Tdx.sys 6.0.6002.19762 72,192 04-Apr-2017 14:35 x86
Tdx.sys 6.0.6002.24087 72,192 05-Apr-2017 14:35 x86
Afd.sys 6.0.6002.19762 273,408 04-Apr-2017 14:35 x86
Afd.sys 6.0.6002.24087 273,920 05-Apr-2017 14:36 x86

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

1.9 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

47.6%