Lucene search

K
mskbMicrosoftKB4019206
HistoryMay 09, 2017 - 7:00 a.m.

Security update for the Windows GDI Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017

2017-05-0907:00:00
Microsoft
support.microsoft.com
32

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.05 Low

EPSS

Percentile

92.8%

Security update for the Windows GDI Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017

Summary

An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve information from a targeted system.

To learn more about the vulnerability, go to CVE-2017-0190.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:Security update deployment information: May 9, 2017

Update replacement

This update replaces previously released update 4017018.

More Information

__

How to obtain help and support for this security update

Help for installing updates: Windows Update FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

__

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB4019206-ia64.msu 10270F2826B7CC7FA91A74F49C6C4A78B3C35CC1 04C29C3B8BD69E9F9B222E548EEF593B3268C03B807280AC058B15133D5B475E
Windows6.0-KB4019206-x64.msu 61BE798760A569E48B6868CBA5A542AB26FCAE97 064D4435D44F36B5A9963B554EC2A5220DDEBF335BFE763CC02BB4A63918EAAF
Windows6.0-KB4019206-x86.msu A250DB86107696DE0A9A9BE64EB93E29833C792B A4161C6AAF43E16776E9BBAC2FF4989ED75270CE7B4210ABEC5D0289A8EE201F

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.

Windows Server 2008 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

__

For all supported ia64-based versions

File name File version File size Date Time Platform
Gdi32.dll 6.0.6002.19765 955,392 07-Apr-2017 15:41 IA-64
Gdi32.dll 6.0.6002.24089 954,880 07-Apr-2017 15:16 IA-64
Gdi32.dll 6.0.6002.19765 305,664 07-Apr-2017 15:56 x86
Gdi32.dll 6.0.6002.24089 305,152 07-Apr-2017 15:25 x86

__

For all supported x64-based versions

File name File version File size Date Time Platform
Gdi32.dll 6.0.6002.19765 391,680 07-Apr-2017 16:18 x64
Gdi32.dll 6.0.6002.24089 391,680 07-Apr-2017 15:43 x64
Gdi32.dll 6.0.6002.19765 305,664 07-Apr-2017 15:56 x86
Gdi32.dll 6.0.6002.24089 305,152 07-Apr-2017 15:25 x86

__

For all supported x86-based versions

File name File version File size Date Time Platform
Gdi32.dll 6.0.6002.19765 299,520 07-Apr-2017 15:54 x86
Gdi32.dll 6.0.6002.24089 299,520 07-Apr-2017 15:23 x86

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

6 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.05 Low

EPSS

Percentile

92.8%