Lucene search

MicrosoftKB4034664

HistoryAug 08, 2017 - 7:00 a.m.

August 8, 2017—KB4034664 (Monthly Rollup)

2017-08-0807:00:00

Microsoft

support.microsoft.com

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.958 High

EPSS

Percentile

99.4%

JSON

August 8, 2017—KB4034664 (Monthly Rollup)

Improvements and fixes

This security update includes improvements and fixes that were a part of update KB4025340(released July 18, 2017) and resolves the following issues:

Security updates to Microsoft JET Database Engine, Common Log File System Driver, Microsoft Windows Search Component, Volume Manager Driver, Internet Explorer, Windows Server, and Windows kernel-mode drivers.
For more information about the resolved security vulnerabilities, see the Security Update Guide.

Known issues in this update

Symptom	Workaround
Due to a defect in WLDAP32.DLL, applications that perform LDAP referral chasing can consume too many dynamic TCP ports (potentially exhausting them) after installing KB4025337 and KB4025341. Applications and roles known to make these referrals may include Outlook.exe, DFSR, and others.If restarting applications that perform LDAP referral chasing returns normal functionality on machines that installed KB 4025337 and KB4025341, you may be experiencing this issue.	To work around the problem, restart services or applications that perform LDAP referral chasing to free TCP dynamic ports. A reboot will also free ports. For example, restarting Outlook will free ports used by that application.To work around the problem for cluster computers hosting the DFSR service, place the virtual cluster object under the Computers container to avoid reaching the referral chasing search, which leads to the dynamic port leak.Microsoft is working on a resolution and will provide an update in an upcoming release.
If a machine has more than one monitor connected and the screen numbering is not in sequence, some applications will experience rendering issues.

Symptom

Workaround

Due to a defect in WLDAP32.DLL, applications that perform LDAP referral chasing can consume too many dynamic TCP ports (potentially exhausting them) after installing KB4025337 and KB4025341. Applications and roles known to make these referrals may include Outlook.exe, DFSR, and others.If restarting applications that perform LDAP referral chasing returns normal functionality on machines that installed KB 4025337 and KB4025341, you may be experiencing this issue.

To work around the problem, restart services or applications that perform LDAP referral chasing to free TCP dynamic ports. A reboot will also free ports. For example, restarting Outlook will free ports used by that application.To work around the problem for cluster computers hosting the DFSR service, place the virtual cluster object under the Computers container to avoid reaching the referral chasing search, which leads to the dynamic port leak.Microsoft is working on a resolution and will provide an update in an upcoming release.

If a machine has more than one monitor connected and the screen numbering is not in sequence, some applications will experience rendering issues.

Enable Desktop Composition (needs graphics card support).
Make sure that the main monitor is on the top left in the monitor layout.
This issue has been resolved with KB4039884.
The WordPad application can sometimes crash on launch after installing KB4025341.| Microsoft is working on a resolution and will provide an update in an upcoming release.

How to get this update

This update will be downloaded and installed automatically from Windows Update. To get the standalone package for this update, go to the Microsoft Update Catalog website. File informationFor a list of the files that are provided in this update, download the file information for update 4034664.