Lucene search

K
mskbMicrosoftKB4041671
HistoryOct 10, 2017 - 7:00 a.m.

Description of the security update for the Windows kernel information disclosure vulnerability: October 10, 2017

2017-10-1007:00:00
Microsoft
support.microsoft.com
12

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.1 High

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

56.4%

Description of the security update for the Windows kernel information disclosure vulnerability: October 10, 2017

Summary

An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (ASLR) bypass.

To learn more about the vulnerability, go to the Security Update Guide.

More Information

Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, see the following article in the Microsoft Knowledge Base:Security update deployment information: October 10, 2017

More Information

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows Server 2008 file information

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

How to obtain help and support for this security update

Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

File hash information

File name SHA1 hash SHA256 hash
Windows6.0-KB4041671-x86.msu 4B25955F5EF022048EFEFDF180B7DD90EBC9F1A8 D71B5405495CA78FB45BD8E1BB0D8CEC9D4E646CC2E11ED173F37E7B5CC0E6EE
Windows6.0-KB4041671-ia64.msu 8FF84E637FAC907B77D003E31F107B31C8424BA3 814DAF9A6AF058570C8238C675B376AA31E95BA6795F20182E8B86E1F8683268
Windows6.0-KB4041671-x64.msu 8F3D2BDC2F154887F1CD16E2F2E8839A24FD7A5D 13EC92D7EF4F2D72D15908A2EFAC6DA67E7A88818DF29CA1ACB0048C5FC42F8D

For all supported x86-based versions

File name File version File size Date Time Platform
Advapi32.dll.mui 6.0.6002.24202 380,928 13-Sep-2017 17:07 Not applicable
Advapi32.dll.mui 6.0.6002.24202 389,120 13-Sep-2017 17:19 Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:10 Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:08 Not applicable
Advapi32.dll.mui 6.0.6002.24202 401,408 13-Sep-2017 17:14 Not applicable
Advapi32.dll.mui 6.0.6002.24202 266,240 13-Sep-2017 15:34 Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 17:15 Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:09 Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 17:12 Not applicable
Advapi32.dll.mui 6.0.6002.24202 376,832 13-Sep-2017 17:10 Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 17:13 Not applicable
Advapi32.dll.mui 6.0.6002.24202 389,120 13-Sep-2017 17:22 Not applicable
Advapi32.dll.mui 6.0.6002.24202 360,448 13-Sep-2017 17:19 Not applicable
Advapi32.dll.mui 6.0.6002.24202 360,448 13-Sep-2017 17:10 Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:22 Not applicable
Advapi32.dll.mui 6.0.6002.24202 389,120 13-Sep-2017 17:22 Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 17:17 Not applicable
Advapi32.dll.mui 6.0.6002.24202 389,120 13-Sep-2017 17:34 Not applicable
Advapi32.dll.mui 6.0.6002.24202 389,120 13-Sep-2017 17:29 Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 17:14 Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:28 Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:32 Not applicable
Advapi32.dll.mui 6.0.6002.24202 356,352 13-Sep-2017 17:18 Not applicable
Advapi32.dll.mui 6.0.6002.24202 348,160 13-Sep-2017 17:16 Not applicable
Advapi32.dll 6.0.6002.24202 802,816 13-Sep-2017 15:20 x86
Csrsrv.dll 6.0.6002.24202 49,664 13-Sep-2017 15:21 x86
Ntdll.dll 6.0.6002.24202 1,209,080 13-Sep-2017 23:08 x86
Ntkrnlpa.exe 6.0.6002.24202 3,613,928 13-Sep-2017 15:48 Not applicable
Ntoskrnl.exe 6.0.6002.24202 3,562,216 13-Sep-2017 15:48 Not applicable
Rpcrt4.dll 6.0.6002.24202 783,872 13-Sep-2017 15:22 x86
Smss.exe 6.0.6002.24202 64,512 13-Sep-2017 14:22 x86

For all supported ia64-based versions

File name File version File size Date Time Platform Service branch
Advapi32.dll.mui 6.0.6002.24202 373,760 13-Sep-2017 16:54 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 255,488 13-Sep-2017 15:29 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,536 13-Sep-2017 17:09 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 352,768 13-Sep-2017 16:56 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 349,696 13-Sep-2017 17:07 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 346,624 13-Sep-2017 17:03 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 338,944 13-Sep-2017 16:59 Not applicable Not applicable
Advapi32.dll 6.0.6002.24202 1,963,520 13-Sep-2017 15:19 IA-64 Not applicable
Csrsrv.dll 6.0.6002.24202 150,016 13-Sep-2017 15:20 IA-64 Not applicable
Ntdll.dll 6.0.6002.24202 2,551,536 13-Sep-2017 23:01 IA-64 Not applicable
Ntoskrnl.exe 6.0.6002.24202 9,469,672 13-Sep-2017 15:43 IA-64 Not applicable
Rpcrt4.dll 6.0.6002.24202 3,289,088 13-Sep-2017 15:21 IA-64 Not applicable
Smss.exe 6.0.6002.24202 159,232 13-Sep-2017 14:24 IA-64 Not applicable
Ia32exec.bin 6.5.6524.0 8,262,048 07-Mar-2016 23:41 Not applicable IA64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll 6.0.6002.24202 27,648 13-Sep-2017 15:21 IA-64 IA64_MICROSOFT-WINDOWS-WOW
Wow64.dll 6.0.6002.24202 524,288 13-Sep-2017 15:22 IA-64 IA64_MICROSOFT-WINDOWS-WOW
Wow64cpu.dll 6.0.6002.24202 43,008 13-Sep-2017 15:22 IA-64 IA64_MICROSOFT-WINDOWS-WOW
Wow64win.dll 6.0.6002.24202 617,984 13-Sep-2017 15:22 IA-64 IA64_MICROSOFT-WINDOWS-WOW
Wowia32x.dll 6.5.6563.0 88,576 13-Sep-2017 15:22 IA-64 IA64_MICROSOFT-WINDOWS-WOW
Ntdll.dll 6.0.6002.24202 1,168,392 13-Sep-2017 23:01 x86 Not applicable
Rpcrt4.dll 6.0.6002.24202 678,912 13-Sep-2017 15:23 x86 Not applicable
Acwow64.dll 6.0.6002.24202 43,008 13-Sep-2017 15:20 x86 WOW64_MICROSOFT-WINDOWS-WOW
Instnm.exe 6.0.6002.24202 7,680 13-Sep-2017 14:22 x86 WOW64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll 6.0.6002.24202 14,336 13-Sep-2017 15:22 x86 WOW64_MICROSOFT-WINDOWS-WOW
Setup16.exe 3.1.0.1918 26,112 13-Sep-2017 14:22 x86 WOW64_MICROSOFT-WINDOWS-WOW
User.exe 6.0.6002.24202 2,560 13-Sep-2017 14:22 x86 WOW64_MICROSOFT-WINDOWS-WOW
Wow32.dll 6.0.6002.24202 5,120 13-Sep-2017 15:23 x86 WOW64_MICROSOFT-WINDOWS-WOW
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:08 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 266,240 13-Sep-2017 15:34 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 17:12 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 360,448 13-Sep-2017 17:19 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 360,448 13-Sep-2017 17:10 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 356,352 13-Sep-2017 17:18 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 348,160 13-Sep-2017 17:16 Not applicable Not applicable
Advapi32.dll 6.0.6002.24202 802,816 13-Sep-2017 15:20 x86 Not applicable

For all supported x64-based versions

File name File version File size Date Time Platform Service branch
Advapi32.dll.mui 6.0.6002.24202 371,200 13-Sep-2017 18:44 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 379,392 13-Sep-2017 18:45 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 376,832 13-Sep-2017 18:44 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 373,760 13-Sep-2017 18:52 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 18:46 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 255,488 13-Sep-2017 15:29 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 381,952 13-Sep-2017 18:52 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 375,808 13-Sep-2017 18:43 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,536 13-Sep-2017 18:45 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 366,080 13-Sep-2017 18:52 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 383,488 13-Sep-2017 19:00 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 380,928 13-Sep-2017 18:54 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 352,768 13-Sep-2017 19:01 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 349,696 13-Sep-2017 18:56 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 374,272 13-Sep-2017 18:56 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 380,416 13-Sep-2017 18:59 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,536 13-Sep-2017 18:53 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 379,392 13-Sep-2017 18:09 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 379,904 13-Sep-2017 18:17 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,536 13-Sep-2017 18:14 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 375,296 13-Sep-2017 18:15 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 375,296 13-Sep-2017 18:15 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 346,624 13-Sep-2017 18:11 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 338,944 13-Sep-2017 18:48 Not applicable Not applicable
Advapi32.dll 6.0.6002.24202 1,067,520 13-Sep-2017 15:21 x64 Not applicable
Csrsrv.dll 6.0.6002.24202 86,016 13-Sep-2017 15:21 x64 Not applicable
Ntdll.dll 6.0.6002.24202 1,583,512 13-Sep-2017 23:05 x64 Not applicable
Ntoskrnl.exe 6.0.6002.24202 4,665,576 13-Sep-2017 15:48 x64 Not applicable
Rpcrt4.dll 6.0.6002.24202 1,308,160 13-Sep-2017 15:23 x64 Not applicable
Smss.exe 6.0.6002.24202 75,776 13-Sep-2017 14:28 x64 Not applicable
Ntvdm64.dll 6.0.6002.24202 16,896 13-Sep-2017 15:22 x64 AMD64_MICROSOFT-WINDOWS-WOW
Wow64.dll 6.0.6002.24202 234,496 13-Sep-2017 15:23 x64 AMD64_MICROSOFT-WINDOWS-WOW
Wow64cpu.dll 6.0.6002.24202 17,408 13-Sep-2017 15:23 x64 AMD64_MICROSOFT-WINDOWS-WOW
Wow64win.dll 6.0.6002.24202 301,568 13-Sep-2017 15:23 x64 AMD64_MICROSOFT-WINDOWS-WOW
Ntdll.dll 6.0.6002.24202 1,168,392 13-Sep-2017 23:05 x86 Not applicable
Rpcrt4.dll 6.0.6002.24202 678,912 13-Sep-2017 15:23 x86 Not applicable
Acwow64.dll 6.0.6002.24202 43,008 13-Sep-2017 15:20 x86 WOW64_MICROSOFT-WINDOWS-WOW
Instnm.exe 6.0.6002.24202 7,680 13-Sep-2017 14:22 x86 WOW64_MICROSOFT-WINDOWS-WOW
Ntvdm64.dll 6.0.6002.24202 14,336 13-Sep-2017 15:22 x86 WOW64_MICROSOFT-WINDOWS-WOW
Setup16.exe 3.1.0.1918 26,112 13-Sep-2017 14:22 x86 WOW64_MICROSOFT-WINDOWS-WOW
User.exe 6.0.6002.24202 2,560 13-Sep-2017 14:22 x86 WOW64_MICROSOFT-WINDOWS-WOW
Wow32.dll 6.0.6002.24202 5,120 13-Sep-2017 15:23 x86 WOW64_MICROSOFT-WINDOWS-WOW
Advapi32.dll.mui 6.0.6002.24202 380,928 13-Sep-2017 17:07 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 389,120 13-Sep-2017 17:19 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:10 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:08 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 401,408 13-Sep-2017 17:14 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 266,240 13-Sep-2017 15:34 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 17:15 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:09 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 17:12 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 376,832 13-Sep-2017 17:10 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 17:13 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 389,120 13-Sep-2017 17:22 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 360,448 13-Sep-2017 17:19 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 360,448 13-Sep-2017 17:10 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:22 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 389,120 13-Sep-2017 17:22 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 17:17 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 389,120 13-Sep-2017 17:34 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 389,120 13-Sep-2017 17:29 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 393,216 13-Sep-2017 17:14 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:28 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 385,024 13-Sep-2017 17:32 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 356,352 13-Sep-2017 17:18 Not applicable Not applicable
Advapi32.dll.mui 6.0.6002.24202 348,160 13-Sep-2017 17:16 Not applicable Not applicable
Advapi32.dll 6.0.6002.24202 802,816 13-Sep-2017 15:20 x86 Not applicable

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.1 High

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

56.4%