Description of the security update for the Microsoft graphics remote code execution vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: April 10, 2018

Summary

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts.

To learn more about the vulnerabilities, see the following Common Vulnerabilities and Exposures (CVE).

• CVE-2018-1010
• CVE-2018-1012
• CVE-2018-1013
• CVE-2018-1015
• CVE-2018-1016

More Information

Important

• If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: April 10, 2018

More Information

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight-saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

**Note:**The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight-saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

How to obtain help and support for this security update

Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

Windows Server 2008 file information

File hash information

File name	SHA1 hash	SHA256 hash
Windows6.0-KB4093223-x86.msu	78CF60F05279EF69E67EB6D8536AF46EED9305B4	586D714C576CD33BA0DE53ADF247A30069C7A4455F1942F2BFC1CA3A91D25821
Windows6.0-KB4093223-ia64.msu	FE74B041CEB5393BAE2E97BCE4FBE6FFA5A8ABDD	D1FFDF10963FAC7F787178DF59099DCD0923DC65D6003AA4D704B73B7C5FE217
Windows6.0-KB4093223-x64.msu	1D87D84D1EC48BA2889D82E357BD8CA1CF4B94FE	1368EBFDEAD62B3656C91AEFCFE66D1C1E3D5CA0EF1E90767D23C9C7F3804499

For all supported x86-based versions

File name	File version	File size	Date	Time	Platform
T2embed.dll	6.0.6002.24331	159,744	09-Mar-2018	20:35	x86
Atmfd.dll	5.1.2.253	306,880	09-Mar-2018	20:57	x86
Atmlib.dll	5.1.2.253	34,304	09-Mar-2018	20:35	x86
Dciman32.dll	6.0.6002.24331	10,240	09-Mar-2018	20:35	x86
Fontsub.dll	6.0.6002.24331	73,216	09-Mar-2018	20:35	x86
Lpk.dll	6.0.6002.24331	23,552	09-Mar-2018	20:35	x86

For all supported ia64-based versions

File name	File version	File size	Date	Time	Platform
T2embed.dll	6.0.6002.24331	410,112	09-Mar-2018	20:13	IA-64
Atmfd.dll	5.1.2.253	795,328	09-Mar-2018	20:33	IA-64
Atmlib.dll	5.1.2.253	92,160	09-Mar-2018	20:13	IA-64
Dciman32.dll	6.0.6002.24331	29,184	09-Mar-2018	20:13	IA-64
Fontsub.dll	6.0.6002.24331	196,096	09-Mar-2018	20:13	IA-64
Lpk.dll	6.0.6002.24331	68,608	09-Mar-2018	20:13	IA-64
Atmfd.dll	5.1.2.253	306,880	09-Mar-2018	20:57	x86
Atmlib.dll	5.1.2.253	34,304	09-Mar-2018	20:35	x86
Dciman32.dll	6.0.6002.24331	10,240	09-Mar-2018	20:35	x86
Fontsub.dll	6.0.6002.24331	73,216	09-Mar-2018	20:35	x86
Lpk.dll	6.0.6002.24331	23,552	09-Mar-2018	20:35	x86
T2embed.dll	6.0.6002.24331	159,744	09-Mar-2018	20:35	x86

For all supported x64-based versions

File name	File version	File size	Date	Time	Platform
T2embed.dll	6.0.6002.24331	193,024	09-Mar-2018	20:18	x64
Atmfd.dll	5.1.2.253	384,704	09-Mar-2018	20:40	x64
Atmlib.dll	5.1.2.253	48,128	09-Mar-2018	20:18	x64
Dciman32.dll	6.0.6002.24331	14,336	09-Mar-2018	20:18	x64
Fontsub.dll	6.0.6002.24331	96,256	09-Mar-2018	20:18	x64
Lpk.dll	6.0.6002.24331	32,768	09-Mar-2018	20:18	x64
Atmfd.dll	5.1.2.253	306,880	09-Mar-2018	20:57	x86
Atmlib.dll	5.1.2.253	34,304	09-Mar-2018	20:35	x86
Dciman32.dll	6.0.6002.24331	10,240	09-Mar-2018	20:35	x86
Fontsub.dll	6.0.6002.24331	73,216	09-Mar-2018	20:35	x86
Lpk.dll	6.0.6002.24331	23,552	09-Mar-2018	20:35	x86
T2embed.dll	6.0.6002.24331	159,744	09-Mar-2018	20:35	x86

Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009 file information

File hash information

File name	SHA1 hash	SHA256 hash
WindowsXP-KB4093223-x86-Embedded-ENU.exe	3F5C77A133AAED66CB1DC3FFC1E60F2C61E12B52	06259100F7BC62957950D652B2F007B8887739BDAA5DF0B66BE53F826967E590

For all supported x86-based versions

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Fontsub.dll	5.1.2600.7450	82,432	10-Mar-2018	04:05	x86	SP3	SP3QFE
T2embed.dll	5.1.2600.7450	122,880	10-Mar-2018	04:05	x86	SP3	SP3QFE
Updspapi.dll	6.3.13.0	382,840	16-May-2014	03:08	x86	None	Not applicable