Lucene search

K
mskbMicrosoftKB4026059
HistoryJul 11, 2017 - 7:00 a.m.

Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: July 11, 2017

2017-07-1107:00:00
Microsoft
support.microsoft.com
24

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

27.9%

Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: July 11, 2017

Summary

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory.To learn more about the vulnerability, see CVE-2017-8590.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, see the following article in the Microsoft Knowledge Base:Security update deployment information: July 11, 2017

More Information

File informationThe English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight-saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows Server 2008 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

How to obtain help and support for this security update

Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB4026059-ia64.msu 5B53D0233D06F0ADA26688C82EA6C359612BCE10 0B593B064978220BA4A2671D8A48A2E031BE7B76364CCC956AF09A9B8965D3D5
Windows6.0-KB4026059-x86.msu 8ECFDE053DB96454E23516B0A968B1102F80B387 08B5C520947657AF18019957CAF69543CC20F94ED37EFD1849770964B426FC2A
Windows6.0-KB4026059-x64.msu 820075DAB16CEBA8324C3C5BB8438963BC3472B3 0350F3DC091BCA2C2EA99E132D21F1CA255C7837DBC2ADF60C32B47AF01FF85E

For all supported ia64-based versions

File name File version File size Date Time Platform
Clfs.mof Not applicable 3,472 03-Jan-2008 18:57 Not applicable
Clfs.sys 6.0.6002.19810 841,448 11-Jun-2017 22:27 IA-64
Clfsuninstall.mof Not applicable 123 03-Jan-2008 18:57 Not applicable
Clfs.mof Not applicable 3,472 07-Mar-2016 23:36 Not applicable
Clfs.sys 6.0.6002.24130 841,448 11-Jun-2017 21:54 IA-64
Clfsuninstall.mof Not applicable 123 07-Mar-2016 23:36 Not applicable

For all supported x86-based versions

File name File version File size Date Time Platform
Clfs.mof Not applicable 3,472 18-Sep-2006 21:38 Not applicable
Clfs.sys 6.0.6002.19810 244,968 11-Jun-2017 22:37 x86
Clfsuninstall.mof Not applicable 123 18-Sep-2006 21:39 Not applicable
Clfs.mof Not applicable 3,472 07-Mar-2016 23:37 Not applicable
Clfs.sys 6.0.6002.24130 244,968 11-Jun-2017 21:59 x86
Clfsuninstall.mof Not applicable 123 07-Mar-2016 23:37 Not applicable

For all supported x64-based versions

File name File version File size Date Time Platform
Clfs.mof Not applicable 3,472 18-Sep-2006 21:36 Not applicable
Clfs.sys 6.0.6002.19810 364,776 11-Jun-2017 22:54 x64
Clfsuninstall.mof Not applicable 123 18-Sep-2006 21:36 Not applicable
Clfs.mof Not applicable 3,472 07-Mar-2016 23:37 Not applicable
Clfs.sys 6.0.6002.24130 364,776 11-Jun-2017 22:16 x64
Clfsuninstall.mof Not applicable 123 07-Mar-2016 23:37 Not applicable

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

9 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

27.9%