Lucene search

K
mskbMicrosoftKB4023307
HistoryJun 13, 2017 - 7:00 a.m.

Windows Uniscribe remote code execution vulnerability: June 13, 2017

2017-06-1307:00:00
Microsoft
support.microsoft.com
64

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.407 Medium

EPSS

Percentile

97.3%

Windows Uniscribe remote code execution vulnerability: June 13, 2017

Summary

This security update resolves a vulnerability in Microsoft Silverlight. The vulnerability could allow remote code execution if a user visits a compromised website that contains a specially crafted Silverlight application. An attacker would have no way to force a user to visit a compromised website. Instead, an attacker would have to convince the user to visit the website, typically by enticing the user to click a link in either an email message or instant message that takes the user to the attacker’s website.

To learn more about the vulnerability, go to CVE-2017-0283.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Silverlight site

The Silverlight installer includes all previous updates in addition to this update. To install the latest version of Silverlight, go to the Get Microsoft Silverlight website.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: June 13, 2017

More Information

How to obtain help and support for this security update

Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

__

Hash information

Package Name Package Hash SHA 1 Package Hash SHA 2
Silverlight.exe E7478F9995AC6F9309034A85D78E1C61ABA5A29F 88E1B76BDF799478A72FA27DB0BFE7BC5D02CC7E53675967399300448F0E266F
Silverlight_Developer.exe D6914B40287243E3161AD5F791A79B145B7BD69D FA571B079F00B2EBA1C5E560AA2F1BC18DB2185A43CF72438109BD058C6C90B3
Silverlight_Developer_x64.exe E2BFCA198B98E1A16D947A5EEB7D1E47128A6D85 C3963469EDC2D88A904A43DBC152BE89E555295DF3D9E1DAD2D4F0B2EB2D3590
Silverlight_x64.exe AD8DB31020463E825C0B620D93477B5321C072D8 8D263A6F42A378073B6F057F242A42076F9F4082340153C2E27ECC959C5036AA

Silverlight file information

File name File version File size Date Time Platform
Install.exe 5.1.50907.0 230,080 04-May-2017 06:44 x86
Install.res.dll 5.1.50907.0 438,440 04-May-2017 05:39 x86
Microsoft_defaults.exe 1.0.0.1 119,968 27-May-2015 04:13 x86
Silverlight.7z Not applicable 6,727,340 04-May-2017 06:45 Not applicable
Silverlight.msi Not applicable 38,912 04-May-2017 05:43 Not applicable

Silverlight x64 file information

File name File version File size Date Time Platform
Install.exe 5.1.50907.0 289,472 04-May-2017 07:28 x64
Install.res.dll 5.1.50907.0 438,440 04-May-2017 06:07 x64
Microsoft_defaults.exe 1.0.0.1 119,968 27-May-2015 04:13 x86
Silverlight.7z Not applicable 12,834,357 04-May-2017 07:29 Not applicable
Silverlight.msi Not applicable 38,912 04-May-2017 06:09 Not applicable

Silverlight Developer file information

File name File version File size Date Time Platform
Install.exe 5.1.50907.0 230,616 04-May-2017 07:00 x86
Install.res.dll 5.1.50907.0 438,440 04-May-2017 05:39 x86
Microsoft_defaults.exe 1.0.0.1 119,968 27-May-2015 04:13 x86
Silverlight.7z Not applicable 6,727,212 04-May-2017 07:01 Not applicable
Silverlight.msi Not applicable 38,912 04-May-2017 05:43 Not applicable

Silverlight Developer x64 file information

File name File version File size Date Time Platform
Install.exe 5.1.50907.0 290,008 04-May-2017 07:57 x64
Install.res.dll 5.1.50907.0 438,440 04-May-2017 06:07 x64
Microsoft_defaults.exe 1.0.0.1 119,968 27-May-2015 04:13 x86
Silverlight.7z Not applicable 12,840,111 04-May-2017 07:58 Not applicable
Silverlight.msi Not applicable 38,912 04-May-2017 06:09 Not applicable

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.407 Medium

EPSS

Percentile

97.3%