Lucene search

K
mskbMicrosoftKB4018885
HistoryMay 09, 2017 - 7:00 a.m.

Security update for the Windows Kernel Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017

2017-05-0907:00:00
Microsoft
support.microsoft.com
28

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

4.5 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

47.5%

Security update for the Windows Kernel Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017

Summary

An information disclosure vulnerability exists when the Windows kernel handles objects in memory incorrectly. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.

To learn more about the vulnerability, go to CVE-2017-0175.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: May 9, 2017

More Information

__

How to obtain help and support for this security update

Help for installing updates: Windows Update FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

__

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB4018885-x64.msu 34C9F60A1F71096FC09468A3B01D6F25BDC650C5 700BACCAC756B6B9191DA6496DDD34EA409CC112A9881BCB6866DB7990BCF86C
Windows6.0-KB4018885-ia64.msu AACBF3F515589867E73BAFDD26B8F4E500F9D23D 9C66687AAE18338951057577459EA0CC10C357135DEB5C1D53413DA1D9F28481
Windows6.0-KB4018885-x86.msu F68E692B0B5AC3ED45071E808B296A60DA359A8E BCF6ACC8F3427AD3135C1E5387544C527153F60535D0A2D9B16D0DA0475C284F

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows Server 2008 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

__

For all supported x64-based versions

File name File version File size Date Time Platform
Tcpipreg.sys 6.0.6002.18160 40,448 08-Dec-2009 17:55 x64
Tcpipreg.sys 6.0.6002.24087 40,448 05-Apr-2017 14:59 x64
Tcpip.sys 6.0.6002.19763 1,422,568 05-Apr-2017 16:26 x64
Tcpip.sys 6.0.6002.24087 1,416,424 05-Apr-2017 15:50 x64

__

For all supported ia64-based versions

File name File version File size Date Time Platform
Tcpipreg.sys 6.0.6002.18160 79,360 08-Dec-2009 17:51 IA-64
Tcpipreg.sys 6.0.6002.24087 80,896 05-Apr-2017 14:39 IA-64
Tcpip.sys 6.0.6002.19763 2,950,376 05-Apr-2017 15:50 IA-64
Tcpip.sys 6.0.6002.24087 2,976,488 05-Apr-2017 15:24 IA-64

__

For all supported x86-based versions

File name File version File size Date Time Platform
Tcpipreg.sys 6.0.6002.18160 30,720 08-Dec-2009 17:26 x86
Tcpipreg.sys 6.0.6002.24087 31,232 05-Apr-2017 14:35 x86
Tcpip.sys 6.0.6002.19763 905,960 05-Apr-2017 16:02 x86
Tcpip.sys 6.0.6002.24087 915,176 05-Apr-2017 15:30 x86

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

4.5 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

47.5%