Lucene search

K
mskbMicrosoftKB4032955
HistoryJul 11, 2017 - 7:00 a.m.

Security update for the Windows Search remote code execution vulnerability in Windows Server 2008: July 11, 2017

2017-07-1107:00:00
Microsoft
support.microsoft.com
12

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.179 Low

EPSS

Percentile

96.1%

Security update for the Windows Search remote code execution vulnerability in Windows Server 2008: July 11, 2017

Summary

A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. The attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.To learn more about the vulnerability, go to CVE-2017-8589.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, see the following article in the Microsoft Knowledge Base:Security update deployment information: July 11, 2017

More Information

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight-saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows Server 2008 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

How to obtain help and support for this security update

Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB4032955-ia64.msu 701BB3B9B226D7A39B4F50314172C07825D80DDC E27BEF33C22754CF48F0D51F4797D0AD71EEC50A5D404B7525429D8A048B3210
Windows6.0-KB4032955-x86.msu F61E602D9A9F385E722988080B8664300C431985 8DD3A2ECCD861BBA5B8586D09861E582CA5E0AA04120F7E57E03A25DCE5F3B8B
Windows6.0-KB4032955-x64.msu 91FCC552EFC2C50A12EB9694F9873D76E6285AC4 E0F1041A90B1C3B4F8F1F9884C93A30BDDAAECBE61A51960BD140BF3E79B74DF

For all supported ia64-based versions

File name File version File size Date Time Platform
Query.dll 6.0.6002.19829 4,434,432 30-Jun-2017 03:00 IA-64
Query.dll 6.0.6002.24149 4,434,432 30-Jun-2017 02:28 IA-64
Query.dll 6.0.6002.19829 1,382,400 30-Jun-2017 03:08 x86
Query.dll 6.0.6002.24149 1,382,400 30-Jun-2017 02:35 x86

For all supported x86-based versions

File name File version File size Date Time Platform
Query.dll 6.0.6002.19829 1,382,400 30-Jun-2017 03:08 x86
Query.dll 6.0.6002.24149 1,382,400 30-Jun-2017 02:35 x86
Gsrvctr.h Not applicable 2,590 16-Apr-2008 00:45 Not applicable
Gsrvctr.ini Not applicable 30,628 16-Apr-2008 00:45 Not applicable
Gthrctr.h Not applicable 3,100 16-Apr-2008 00:44 Not applicable
Gthrctr.ini Not applicable 31,698 16-Apr-2008 00:44 Not applicable
Idxcntrs.h Not applicable 4,640 16-Apr-2008 00:46 Not applicable
Idxcntrs.ini Not applicable 20,698 16-Apr-2008 00:46 Not applicable
Msscb.dll 7.0.6002.19805 35,328 02-Jun-2017 07:00 x86
Msscntrs.dll 7.0.6002.19805 60,416 02-Jun-2017 07:00 x86
Msshooks.dll 7.0.6002.18005 11,776 11-Apr-2009 06:28 x86
Mssitlb.dll 7.0.6002.19805 87,040 02-Jun-2017 07:00 x86
Mssph.dll 7.0.6002.19805 351,744 02-Jun-2017 07:00 x86
Mssphtb.dll 7.0.6002.19805 203,264 02-Jun-2017 07:00 x86
Mssprxy.dll 7.0.6002.18005 33,280 11-Apr-2009 06:28 x86
Mssrch.dll 7.0.6002.19805 1,480,192 02-Jun-2017 07:00 x86
Msstrc.dll 7.0.6002.19805 43,008 02-Jun-2017 07:00 x86
Mssvp.dll 7.0.6002.19805 670,720 02-Jun-2017 07:00 x86
Propdefs.dll 7.0.6002.19805 71,168 02-Jun-2017 07:00 x86
Searchfilterhost.exe 7.0.6002.19805 87,552 02-Jun-2017 05:32 x86
Searchindexer.exe 7.0.6002.19805 440,832 02-Jun-2017 05:33 x86
Searchprotocolhost.exe 7.0.6002.19805 185,344 02-Jun-2017 05:33 x86
Tquery.dll 7.0.6002.19829 1,577,472 30-Jun-2017 03:08 x86
Gsrvctr.h Not applicable 2,590 07-Mar-2016 23:36 Not applicable
Gsrvctr.ini Not applicable 30,628 07-Mar-2016 23:36 Not applicable
Gthrctr.h Not applicable 3,100 07-Mar-2016 23:36 Not applicable
Gthrctr.ini Not applicable 31,698 07-Mar-2016 23:36 Not applicable
Idxcntrs.h Not applicable 4,640 07-Mar-2016 23:36 Not applicable
Idxcntrs.ini Not applicable 20,698 07-Mar-2016 23:36 Not applicable
Msscb.dll 7.0.6002.24149 35,328 30-Jun-2017 02:34 x86
Msscntrs.dll 7.0.6002.24149 60,416 30-Jun-2017 02:34 x86
Msshooks.dll 7.0.6002.24149 11,776 30-Jun-2017 02:34 x86
Mssitlb.dll 7.0.6002.24149 87,040 30-Jun-2017 02:34 x86
Mssph.dll 7.0.6002.24149 351,744 30-Jun-2017 02:34 x86
Mssphtb.dll 7.0.6002.24149 203,264 30-Jun-2017 02:34 x86
Mssprxy.dll 7.0.6002.24149 33,280 30-Jun-2017 02:34 x86
Mssrch.dll 7.0.6002.24149 1,480,192 30-Jun-2017 02:34 x86
Msstrc.dll 7.0.6002.24149 43,008 30-Jun-2017 02:34 x86
Mssvp.dll 7.0.6002.24149 670,720 30-Jun-2017 02:34 x86
Propdefs.dll 7.0.6002.24149 71,168 30-Jun-2017 02:35 x86
Searchfilterhost.exe 7.0.6002.24149 87,552 30-Jun-2017 01:53 x86
Searchindexer.exe 7.0.6002.24149 441,344 30-Jun-2017 01:54 x86
Searchprotocolhost.exe 7.0.6002.24149 185,344 30-Jun-2017 01:54 x86
Tquery.dll 7.0.6002.24149 1,577,472 30-Jun-2017 02:35 x86

For all supported x64-based versions

File name File version File size Date Time Platform
Query.dll 6.0.6002.19829 2,031,104 30-Jun-2017 03:36 x64
Query.dll 6.0.6002.24149 2,030,080 30-Jun-2017 02:53 x64
Gsrvctr.h Not applicable 2,590 03-Sep-2008 18:46 Not applicable
Gsrvctr.ini Not applicable 30,628 03-Sep-2008 18:46 Not applicable
Gthrctr.h Not applicable 3,100 03-Sep-2008 18:46 Not applicable
Gthrctr.ini Not applicable 31,698 03-Sep-2008 18:46 Not applicable
Idxcntrs.h Not applicable 4,640 03-Sep-2008 18:48 Not applicable
Idxcntrs.ini Not applicable 20,698 03-Sep-2008 18:48 Not applicable
Msscb.dll 7.0.6002.19805 44,544 02-Jun-2017 07:15 x64
Msscntrs.dll 7.0.6002.19805 73,728 02-Jun-2017 07:15 x64
Msshooks.dll 7.0.6002.18005 11,776 11-Apr-2009 07:11 x64
Mssitlb.dll 7.0.6002.19805 87,552 02-Jun-2017 07:15 x64
Mssph.dll 7.0.6002.19805 500,736 02-Jun-2017 07:15 x64
Mssphtb.dll 7.0.6002.19805 312,832 02-Jun-2017 07:15 x64
Mssprxy.dll 7.0.6002.18005 40,448 11-Apr-2009 07:11 x64
Mssrch.dll 7.0.6002.19805 2,279,936 02-Jun-2017 07:15 x64
Msstrc.dll 7.0.6002.19805 78,336 02-Jun-2017 07:15 x64
Mssvp.dll 7.0.6002.19805 796,672 02-Jun-2017 07:15 x64
Propdefs.dll 7.0.6002.19805 80,896 02-Jun-2017 07:16 x64
Searchfilterhost.exe 7.0.6002.19805 111,616 02-Jun-2017 05:56 x64
Searchindexer.exe 7.0.6002.19805 596,992 02-Jun-2017 05:57 x64
Searchprotocolhost.exe 7.0.6002.19805 258,560 02-Jun-2017 05:58 x64
Tquery.dll 7.0.6002.19829 2,206,208 30-Jun-2017 03:37 x64
Gsrvctr.h Not applicable 2,590 07-Mar-2016 23:36 Not applicable
Gsrvctr.ini Not applicable 30,628 07-Mar-2016 23:36 Not applicable
Gthrctr.h Not applicable 3,100 07-Mar-2016 23:36 Not applicable
Gthrctr.ini Not applicable 31,698 07-Mar-2016 23:36 Not applicable
Idxcntrs.h Not applicable 4,640 07-Mar-2016 23:36 Not applicable
Idxcntrs.ini Not applicable 20,698 07-Mar-2016 23:36 Not applicable
Msscb.dll 7.0.6002.24149 44,544 30-Jun-2017 02:52 x64
Msscntrs.dll 7.0.6002.24149 74,240 30-Jun-2017 02:52 x64
Msshooks.dll 7.0.6002.24149 11,776 30-Jun-2017 02:52 x64
Mssitlb.dll 7.0.6002.24149 87,552 30-Jun-2017 02:52 x64
Mssph.dll 7.0.6002.24149 501,248 30-Jun-2017 02:52 x64
Mssphtb.dll 7.0.6002.24149 313,344 30-Jun-2017 02:52 x64
Mssprxy.dll 7.0.6002.24149 40,448 30-Jun-2017 02:52 x64
Mssrch.dll 7.0.6002.24149 2,279,936 30-Jun-2017 02:52 x64
Msstrc.dll 7.0.6002.24149 78,848 30-Jun-2017 02:52 x64
Mssvp.dll 7.0.6002.24149 797,184 30-Jun-2017 02:52 x64
Propdefs.dll 7.0.6002.24149 80,896 30-Jun-2017 02:53 x64
Searchfilterhost.exe 7.0.6002.24149 112,128 30-Jun-2017 02:17 x64
Searchindexer.exe 7.0.6002.24149 597,504 30-Jun-2017 02:19 x64
Searchprotocolhost.exe 7.0.6002.24149 259,072 30-Jun-2017 02:17 x64
Tquery.dll 7.0.6002.24149 2,206,720 30-Jun-2017 02:53 x64
Msscb.dll 7.0.6002.19805 35,328 02-Jun-2017 07:00 x86
Msscntrs.dll 7.0.6002.19805 60,416 02-Jun-2017 07:00 x86
Msshooks.dll 7.0.6002.18005 11,776 11-Apr-2009 06:28 x86
Mssitlb.dll 7.0.6002.19805 87,040 02-Jun-2017 07:00 x86
Mssph.dll 7.0.6002.19805 351,744 02-Jun-2017 07:00 x86
Mssphtb.dll 7.0.6002.19805 203,264 02-Jun-2017 07:00 x86
Mssprxy.dll 7.0.6002.18005 33,280 11-Apr-2009 06:28 x86
Mssrch.dll 7.0.6002.19805 1,480,192 02-Jun-2017 07:00 x86
Msstrc.dll 7.0.6002.19805 43,008 02-Jun-2017 07:00 x86
Mssvp.dll 7.0.6002.19805 670,720 02-Jun-2017 07:00 x86
Propdefs.dll 7.0.6002.19805 71,168 02-Jun-2017 07:00 x86
Searchfilterhost.exe 7.0.6002.19805 87,552 02-Jun-2017 05:32 x86
Searchindexer.exe 7.0.6002.19805 440,832 02-Jun-2017 05:33 x86
Searchprotocolhost.exe 7.0.6002.19805 185,344 02-Jun-2017 05:33 x86
Tquery.dll 7.0.6002.19829 1,577,472 30-Jun-2017 03:08 x86
Msscb.dll 7.0.6002.24149 35,328 30-Jun-2017 02:34 x86
Msscntrs.dll 7.0.6002.24149 60,416 30-Jun-2017 02:34 x86
Msshooks.dll 7.0.6002.24149 11,776 30-Jun-2017 02:34 x86
Mssitlb.dll 7.0.6002.24149 87,040 30-Jun-2017 02:34 x86
Mssph.dll 7.0.6002.24149 351,744 30-Jun-2017 02:34 x86
Mssphtb.dll 7.0.6002.24149 203,264 30-Jun-2017 02:34 x86
Mssprxy.dll 7.0.6002.24149 33,280 30-Jun-2017 02:34 x86
Mssrch.dll 7.0.6002.24149 1,480,192 30-Jun-2017 02:34 x86
Msstrc.dll 7.0.6002.24149 43,008 30-Jun-2017 02:34 x86
Mssvp.dll 7.0.6002.24149 670,720 30-Jun-2017 02:34 x86
Propdefs.dll 7.0.6002.24149 71,168 30-Jun-2017 02:35 x86
Searchfilterhost.exe 7.0.6002.24149 87,552 30-Jun-2017 01:53 x86
Searchindexer.exe 7.0.6002.24149 441,344 30-Jun-2017 01:54 x86
Searchprotocolhost.exe 7.0.6002.24149 185,344 30-Jun-2017 01:54 x86
Tquery.dll 7.0.6002.24149 1,577,472 30-Jun-2017 02:35 x86
Query.dll 6.0.6002.19829 1,382,400 30-Jun-2017 03:08 x86
Query.dll 6.0.6002.24149 1,382,400 30-Jun-2017 02:35 x86

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.179 Low

EPSS

Percentile

96.1%