Lucene search

K
mskbMicrosoftKB4019149
HistoryMay 09, 2017 - 7:00 a.m.

Security update for the Dxgkrnl.sys Elevation of Privilege Vulnerability in Windows Server 2008: May 9, 2017

2017-05-0907:00:00
Microsoft
support.microsoft.com
16

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

20.5%

Security update for the Dxgkrnl.sys Elevation of Privilege Vulnerability in Windows Server 2008: May 9, 2017

Summary

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver handles objects in memory incorrectly. An attacker who successfully exploits the vulnerability could obtain information to further compromise the user’s system. On computers that have 64-bit Windows 7 or later systems installed, this vulnerability can lead to a denial of service.

To learn more about the vulnerability, go to CVE-2017-0077.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: May 9, 2017

More Information

__

How to obtain help and support for this security update

Help for installing updates: Windows Update FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

__

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB4019149-ia64.msu 7809D37527DAA1B986B134D2068CC2C88A3A5803 B6F7F80BC80BA191CDDC42E9C3A738067CDB1F83D03F236D0CEC6AB00C8FCCB0
Windows6.0-KB4019149-x64.msu 39AE9056E4D6CDD7AEAC4C6224E4062C8F7DEBEC A3E055FEE19A4DC7EB3B9CF25E216004B5C710AFE9BBAD34F93BE30DA872319C
Windows6.0-KB4019149-x86.msu 4D038001037EF245542CF1A7EA51654BE9ED8BB8 61EA0FE4CCA0BD69D8893C5A3ACD627F9EDF6E21F9AC94A02E2B6BE4BD45D2EC

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows Server 2008 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

__

For all supported ia64-based versions

File name File version File size Date Time Platform
Cdd.dll 7.0.6002.18823 105,984 13-Apr-2013 03:48 IA-64
Dxgkrnl.sys 7.0.6002.19765 2,008,808 07-Apr-2017 15:58 IA-64
Cdd.dll 7.0.6002.24089 105,984 07-Apr-2017 15:16 IA-64
Dxgkrnl.sys 7.0.6002.24089 2,008,808 07-Apr-2017 15:44 IA-64

__

For all supported x64-based versions

File name File version File size Date Time Platform
Cdd.dll 7.0.6002.18392 47,104 20-Jan-2011 16:12 x64
Dxgkrnl.sys 7.0.6002.19765 901,352 07-Apr-2017 16:25 x64
Cdd.dll 7.0.6002.24089 47,104 07-Apr-2017 15:42 x64
Dxgkrnl.sys 7.0.6002.24089 901,352 07-Apr-2017 15:50 x64

__

For all supported x86-based versions

File name File version File size Date Time Platform
Cdd.dll 7.0.6002.18392 37,376 20-Jan-2011 16:02 x86
Dxgkrnl.sys 7.0.6002.19765 638,184 07-Apr-2017 16:08 x86
Cdd.dll 7.0.6002.24089 37,376 07-Apr-2017 15:22 x86
Dxgkrnl.sys 7.0.6002.24089 638,184 07-Apr-2017 15:30 x86

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

20.5%