Lucene search

K
mskbMicrosoftKB4024402
HistoryJun 13, 2017 - 7:00 a.m.

Windows search vulnerabilities in Windows Server 2008: June 13, 2017

2017-06-1307:00:00
Microsoft
support.microsoft.com
26

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.45 Medium

EPSS

Percentile

97.4%

Windows search vulnerabilities in Windows Server 2008: June 13, 2017

Summary

This security update resolves vulnerabilities in Windows Server 2008 that could allow information disclosure or remote code execution.

To learn more about the vulnerabilities, go to the Security Update Guide.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: June 13, 2017

More Information

File information
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows Vista and Windows Server 2008 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

How to obtain help and support for this security update

Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB4024402-x86.msu 928A130282F2EFCF5B95FE216A8684876D22E25C 69F91D99FE5405B477BBC190033D64529AE3BEE32E7764258E4876042439083D
Windows6.0-KB4024402-x64.msu 4F196A5FCE4585037BBEC4F489C38B2FD5BA8A1C D28E526145DE657190CF1B083CEEB381AC5C7D609A727DE4A68F95A610243B77

For all supported x86-based versions

File name File version File size Date Time Platform
Gsrvctr.h Not applicable 2,590 16-Apr-2008 00:45 Not applicable
Gsrvctr.ini Not applicable 30,628 16-Apr-2008 00:45 Not applicable
Gthrctr.h Not applicable 3,100 16-Apr-2008 00:44 Not applicable
Gthrctr.ini Not applicable 31,698 16-Apr-2008 00:44 Not applicable
Idxcntrs.h Not applicable 4,640 16-Apr-2008 00:46 Not applicable
Idxcntrs.ini Not applicable 20,698 16-Apr-2008 00:46 Not applicable
Msscb.dll 7.0.6002.19805 35,328 02-Jun-2017 07:00 x86
Msscntrs.dll 7.0.6002.19805 60,416 02-Jun-2017 07:00 x86
Msshooks.dll 7.0.6002.18005 11,776 11-Apr-2009 06:28 x86
Mssitlb.dll 7.0.6002.19805 87,040 02-Jun-2017 07:00 x86
Mssph.dll 7.0.6002.19805 351,744 02-Jun-2017 07:00 x86
Mssphtb.dll 7.0.6002.19805 203,264 02-Jun-2017 07:00 x86
Mssprxy.dll 7.0.6002.18005 33,280 11-Apr-2009 06:28 x86
Mssrch.dll 7.0.6002.19805 1,480,192 02-Jun-2017 07:00 x86
Msstrc.dll 7.0.6002.19805 43,008 02-Jun-2017 07:00 x86
Mssvp.dll 7.0.6002.19805 670,720 02-Jun-2017 07:00 x86
Propdefs.dll 7.0.6002.19805 71,168 02-Jun-2017 07:00 x86
Searchfilterhost.exe 7.0.6002.19805 87,552 02-Jun-2017 05:32 x86
Searchindexer.exe 7.0.6002.19805 440,832 02-Jun-2017 05:33 x86
Searchprotocolhost.exe 7.0.6002.19805 185,344 02-Jun-2017 05:33 x86
Tquery.dll 7.0.6002.19805 1,577,984 02-Jun-2017 07:00 x86
Gsrvctr.h Not applicable 2,590 07-Mar-2016 23:36 Not applicable
Gsrvctr.ini Not applicable 30,628 07-Mar-2016 23:36 Not applicable
Gthrctr.h Not applicable 3,100 07-Mar-2016 23:36 Not applicable
Gthrctr.ini Not applicable 31,698 07-Mar-2016 23:36 Not applicable
Idxcntrs.h Not applicable 4,640 07-Mar-2016 23:36 Not applicable
Idxcntrs.ini Not applicable 20,698 07-Mar-2016 23:36 Not applicable
Msscb.dll 7.0.6002.24123 35,328 02-Jun-2017 06:16 x86
Msscntrs.dll 7.0.6002.24123 60,416 02-Jun-2017 06:16 x86
Msshooks.dll 7.0.6002.24123 11,776 02-Jun-2017 06:16 x86
Mssitlb.dll 7.0.6002.24123 87,040 02-Jun-2017 06:16 x86
Mssph.dll 7.0.6002.24123 351,744 02-Jun-2017 06:16 x86
Mssphtb.dll 7.0.6002.24123 203,264 02-Jun-2017 06:16 x86
Mssprxy.dll 7.0.6002.24123 33,280 02-Jun-2017 06:16 x86
Mssrch.dll 7.0.6002.24123 1,480,192 02-Jun-2017 06:16 x86
Msstrc.dll 7.0.6002.24123 43,008 02-Jun-2017 06:16 x86
Mssvp.dll 7.0.6002.24123 670,720 02-Jun-2017 06:16 x86
Propdefs.dll 7.0.6002.24123 71,168 02-Jun-2017 06:16 x86
Searchfilterhost.exe 7.0.6002.24123 87,552 02-Jun-2017 05:35 x86
Searchindexer.exe 7.0.6002.24123 441,344 02-Jun-2017 05:35 x86
Searchprotocolhost.exe 7.0.6002.24123 185,344 02-Jun-2017 05:35 x86
Tquery.dll 7.0.6002.24123 1,577,984 02-Jun-2017 06:17 x86

For all supported x64-based versions

File name File version File size Date Time Platform
Gsrvctr.h Not applicable 2,590 03-Sep-2008 18:46 Not applicable
Gsrvctr.ini Not applicable 30,628 03-Sep-2008 18:46 Not applicable
Gthrctr.h Not applicable 3,100 03-Sep-2008 18:46 Not applicable
Gthrctr.ini Not applicable 31,698 03-Sep-2008 18:46 Not applicable
Idxcntrs.h Not applicable 4,640 03-Sep-2008 18:48 Not applicable
Idxcntrs.ini Not applicable 20,698 03-Sep-2008 18:48 Not applicable
Msscb.dll 7.0.6002.19805 44,544 02-Jun-2017 07:15 x64
Msscntrs.dll 7.0.6002.19805 73,728 02-Jun-2017 07:15 x64
Msshooks.dll 7.0.6002.18005 11,776 11-Apr-2009 07:11 x64
Mssitlb.dll 7.0.6002.19805 87,552 02-Jun-2017 07:15 x64
Mssph.dll 7.0.6002.19805 500,736 02-Jun-2017 07:15 x64
Mssphtb.dll 7.0.6002.19805 312,832 02-Jun-2017 07:15 x64
Mssprxy.dll 7.0.6002.18005 40,448 11-Apr-2009 07:11 x64
Mssrch.dll 7.0.6002.19805 2,279,936 02-Jun-2017 07:15 x64
Msstrc.dll 7.0.6002.19805 78,336 02-Jun-2017 07:15 x64
Mssvp.dll 7.0.6002.19805 796,672 02-Jun-2017 07:15 x64
Propdefs.dll 7.0.6002.19805 80,896 02-Jun-2017 07:16 x64
Searchfilterhost.exe 7.0.6002.19805 111,616 02-Jun-2017 05:56 x64
Searchindexer.exe 7.0.6002.19805 596,992 02-Jun-2017 05:57 x64
Searchprotocolhost.exe 7.0.6002.19805 258,560 02-Jun-2017 05:58 x64
Tquery.dll 7.0.6002.19805 2,205,184 02-Jun-2017 07:16 x64
Gsrvctr.h Not applicable 2,590 07-Mar-2016 23:36 Not applicable
Gsrvctr.ini Not applicable 30,628 07-Mar-2016 23:36 Not applicable
Gthrctr.h Not applicable 3,100 07-Mar-2016 23:36 Not applicable
Gthrctr.ini Not applicable 31,698 07-Mar-2016 23:36 Not applicable
Idxcntrs.h Not applicable 4,640 07-Mar-2016 23:36 Not applicable
Idxcntrs.ini Not applicable 20,698 07-Mar-2016 23:36 Not applicable
Msscb.dll 7.0.6002.24123 44,544 02-Jun-2017 06:37 x64
Msscntrs.dll 7.0.6002.24123 74,240 02-Jun-2017 06:37 x64
Msshooks.dll 7.0.6002.24123 11,776 02-Jun-2017 06:37 x64
Mssitlb.dll 7.0.6002.24123 87,552 02-Jun-2017 06:37 x64
Mssph.dll 7.0.6002.24123 501,248 02-Jun-2017 06:37 x64
Mssphtb.dll 7.0.6002.24123 313,344 02-Jun-2017 06:37 x64
Mssprxy.dll 7.0.6002.24123 40,448 02-Jun-2017 06:37 x64
Mssrch.dll 7.0.6002.24123 2,279,936 02-Jun-2017 06:37 x64
Msstrc.dll 7.0.6002.24123 78,848 02-Jun-2017 06:37 x64
Mssvp.dll 7.0.6002.24123 797,184 02-Jun-2017 06:37 x64
Propdefs.dll 7.0.6002.24123 80,896 02-Jun-2017 06:37 x64
Searchfilterhost.exe 7.0.6002.24123 112,128 02-Jun-2017 06:00 x64
Searchindexer.exe 7.0.6002.24123 597,504 02-Jun-2017 06:01 x64
Searchprotocolhost.exe 7.0.6002.24123 259,072 02-Jun-2017 06:01 x64
Tquery.dll 7.0.6002.24123 2,205,184 02-Jun-2017 06:37 x64
Msscb.dll 7.0.6002.19805 35,328 02-Jun-2017 07:00 x86
Msscntrs.dll 7.0.6002.19805 60,416 02-Jun-2017 07:00 x86
Msshooks.dll 7.0.6002.18005 11,776 11-Apr-2009 06:28 x86
Mssitlb.dll 7.0.6002.19805 87,040 02-Jun-2017 07:00 x86
Mssph.dll 7.0.6002.19805 351,744 02-Jun-2017 07:00 x86
Mssphtb.dll 7.0.6002.19805 203,264 02-Jun-2017 07:00 x86
Mssprxy.dll 7.0.6002.18005 33,280 11-Apr-2009 06:28 x86
Mssrch.dll 7.0.6002.19805 1,480,192 02-Jun-2017 07:00 x86
Msstrc.dll 7.0.6002.19805 43,008 02-Jun-2017 07:00 x86
Mssvp.dll 7.0.6002.19805 670,720 02-Jun-2017 07:00 x86
Propdefs.dll 7.0.6002.19805 71,168 02-Jun-2017 07:00 x86
Searchfilterhost.exe 7.0.6002.19805 87,552 02-Jun-2017 05:32 x86
Searchindexer.exe 7.0.6002.19805 440,832 02-Jun-2017 05:33 x86
Searchprotocolhost.exe 7.0.6002.19805 185,344 02-Jun-2017 05:33 x86
Tquery.dll 7.0.6002.19805 1,577,984 02-Jun-2017 07:00 x86
Msscb.dll 7.0.6002.24123 35,328 02-Jun-2017 06:16 x86
Msscntrs.dll 7.0.6002.24123 60,416 02-Jun-2017 06:16 x86
Msshooks.dll 7.0.6002.24123 11,776 02-Jun-2017 06:16 x86
Mssitlb.dll 7.0.6002.24123 87,040 02-Jun-2017 06:16 x86
Mssph.dll 7.0.6002.24123 351,744 02-Jun-2017 06:16 x86
Mssphtb.dll 7.0.6002.24123 203,264 02-Jun-2017 06:16 x86
Mssprxy.dll 7.0.6002.24123 33,280 02-Jun-2017 06:16 x86
Mssrch.dll 7.0.6002.24123 1,480,192 02-Jun-2017 06:16 x86
Msstrc.dll 7.0.6002.24123 43,008 02-Jun-2017 06:16 x86
Mssvp.dll 7.0.6002.24123 670,720 02-Jun-2017 06:16 x86
Propdefs.dll 7.0.6002.24123 71,168 02-Jun-2017 06:16 x86
Searchfilterhost.exe 7.0.6002.24123 87,552 02-Jun-2017 05:35 x86
Searchindexer.exe 7.0.6002.24123 441,344 02-Jun-2017 05:35 x86
Searchprotocolhost.exe 7.0.6002.24123 185,344 02-Jun-2017 05:35 x86
Tquery.dll 7.0.6002.24123 1,577,984 02-Jun-2017 06:17 x86

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.45 Medium

EPSS

Percentile

97.4%