Lucene search

K
mskbMicrosoftKB4052978
HistoryDec 12, 2017 - 8:00 a.m.

Cumulative security update for Internet Explorer: December 12, 2017

2017-12-1208:00:00
Microsoft
support.microsoft.com
41

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.947 High

EPSS

Percentile

99.2%

Cumulative security update for Internet Explorer: December 12, 2017

Summary

This security update resolves several reported vulnerabilities in Internet Explorer. The most severe of these vulnerabilities could allow remote code execution if a user views a specially crafted webpage in Internet Explorer. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures. Additionally, see the following articles for more information about this cumulative update:

  • Windows 7 SP1 and Windows Server 2008 R2 SP1 update history

  • Windows Server 2012 update history

  • Windows 8.1 and Windows Server 2012 R2 update history

  • Windows 10 and Windows Server 2016 update history
    Important

  • The fixes that are included in this Security Update for Internet Explorer 4052978 are also included in the December 2017 Security Monthly Quality Rollup. Installing either the Security Update for Internet Explorer or the Security Monthly Quality Rollup installs the fixes that are in this update.

  • If you use update management processes other than Windows Update and you automatically approve all security updates classifications for deployment, this Security Update for Internet Explorer 4052978, the December 2017 Security Only Quality Update, and the December 2017 Security Monthly Quality Rollup are deployed. We recommend that you review your update deployment rules to make sure that the desired updates are deployed.

  • This Security Update for Internet Explorer is not applicable for installation on a computer where the Security Monthly Quality Rollup or the Preview of Monthly Quality Rollup from December 2017 (or a later month) is already installed. This is because those updates contain all fixes that are in this Security Update for Internet Explorer.

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Deployment information

For deployment details for this security update, see the following article in the Microsoft Knowledge Base:Security update deployment information: December 12, 2017

How to get and install the update

Method 1: Microsoft Update

This update is available through Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically.For more information about how to get security updates automatically, see Windows Update: FAQ.Note For Windows RT and Windows RT 8.1, this update is available through Microsoft Update only.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

More Information

__

How to get help and support for this security update

Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File informationFor a list of the files that are provided in this cumulative update, download the file information for cumulative update KB 4052978.

File hash information

File name SHA1 hash SHA256 hash
Windows8.1-KB4052978-x86.msu DFFD7ADD5FF57CE58D4D3FA250999D0C76DDB059 5360A01857C1C94962A35C12249C62B20FD2070D9303E31773DFD1704640C94D
Windows8.1-KB4052978-x64.msu 95978DBA754B4097031F369A23BF1C17BD81F7D7 70C7DAEB39EEDB0F8E1B03851FCE66B36B68AE13DDDB1CC56D8202E84CD3D36C
Windows8-RT-KB4052978-x64.msu FC28568EBA01C2FA019469393091A2DEDC9FE262 1AA6D2D922002CCE357942B7003FD364DF09E118F1A783A303207EF6BE54B7AA
IE11-Windows6.1-KB4052978-X64.msu EFA1E0C54BCEBD5117891D8E82104CEE742444C2 9F289E216653A82485D90667DF8E1FA209C497775D063A0B305B3440883680C9
IE11-Windows6.1-KB4052978-X86.msu 92C867719463186F23E992EBF1AD6442DF3DD949 3455AB15B8CEC9AFDA1AE382248E438B3A0D403D5D81476914D430C90EC3FF45
IE9-Windows6.0-KB4052978-X86.msu E6B5ED0888DA1070EE47067D30DFE9C0F08EF9F1 2D210B855AB5DA7B6282EDA0B025FC0CDE8BC9ED77F460DB91F43ED99DD53877
IE9-Windows6.0-KB4052978-X64.msu 8135281F95B2A577506830C2B17CA65B86600A74 5E4475E4C8CBF88F8C9F0E570D3D7ECCDC02158FF274AC4C2A191732FDA85FAF

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

High

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.947 High

EPSS

Percentile

99.2%