Lucene search

K
mskbMicrosoftKB4034786
HistorySep 12, 2017 - 7:00 a.m.

Security update for the Microsoft Bluetooth driver spoofing vulnerability in Windows Server 2008: September 12, 2017

2017-09-1207:00:00
Microsoft
support.microsoft.com
34

6.8 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

7.3 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

45.3%

Security update for the Microsoft Bluetooth driver spoofing vulnerability in Windows Server 2008: September 12, 2017

Summary

A spoofing vulnerability exists in the Microsoft implementation of the Bluetooth stack. An attacker who successfully exploits this vulnerability could perform a man-in-the-middle attack and force a user’s computer to unknowingly route traffic through the attacker’s computer. The attacker can then monitor and read the traffic before sending it on to the intended recipient.

To learn more about the vulnerability, go to CVE-2017-8628.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: September 12, 2017

More Information

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight-saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows Server 2008 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

How to obtain help and support for this security update

Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB4034786-ia64.msu 3534AA872A80716747A38FB66C0E9D1ADD85CBBC 2DA74EDADEB010AE7C55EDB1CED9F3DF4479AD876A4FCEE3DCCC649158C18D7C
Windows6.0-KB4034786-x64.msu F5B1C4765F41441C44F8922927C20A516A8F15E8 7E31D3A2F0B9CBCA8154F95375C931251B5DD823B55A97D4066438CA72668AE3
Windows6.0-KB4034786-x86.msu 85B14551EC11608E44639DB97EDE801F59BBAF43 23D149ED9B525EB6433DC8DC990F8C747A340EDD5E1564FAB7216924E564DAF4

For all supported ia64-based versions

File name File version File size Date Time Platform
Bthpan.sys 6.0.6002.19848 279,552 14-Jul-2017 16:14 IA-64
Bthpan.sys 6.0.6002.24169 279,552 14-Jul-2017 15:42 IA-64

For all supported x64-based versions

File name File version File size Date Time Platform
Bthpan.sys 6.0.6002.19848 116,224 14-Jul-2017 16:24 x64
Bthpan.sys 6.0.6002.24169 116,224 14-Jul-2017 16:02 x64

For all supported x86-based versions

File name File version File size Date Time Platform
Bthpan.sys 6.0.6002.19848 92,672 14-Jul-2017 16:06 x86
Bthpan.sys 6.0.6002.24169 92,672 14-Jul-2017 15:37 x86

6.8 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

7.3 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

45.3%