Description of the security update for the GDI vulnerabilities in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: August 14, 2018

Summary

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory.

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of memory.

To learn more about the vulnerabilities, go to the following Common Vulnerabilities and Exposures (CVE).

• CVE-2018-8394
• CVE-2018-8396
• CVE-2018-8397
• CVE-2018-8398

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website. ImportantIf you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:Security update deployment information: August 14, 2018

More Information

Help for installing updates: Windows Update: FAQSecurity solutions for IT professionals: TechNet Security Support and TroubleshootingHelp for protecting your Windows-based computer from viruses and malware: Microsoft SecureLocal support according to your country: International Support

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows Server 2008 file information

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

File Information

File hash information

File name	SHA1 hash	SHA256 hash
Windows6.0-KB4343674-x64.msu	49D66F91BBC25EDF380E52E22E5F58738CCB1FD5	F27DB86DE60A3120836C8B1BD56BEB264772225E1126F05DADB167DBE53827BD
Windows6.0-KB4343674-x86.msu	B48B5820B0501FF29A6999CD0F30D376958F9A73	C956053E0F6D58AFC32B3DB17C5C898AB410BA2D49D896D4CAFCCC6FDB5D4A90
Windows6.0-KB4343674-ia64.msu	999EC0FCB733A3B0A87EF287A6EABEC68B5E1F01	7506C048CA3ED4AC0CFFE110539555EFFB7786EF9FC827144F1D425BB36FD1DD
WindowsXP-KB4343674-x86-Embedded-ENU.exe	CA27AEBE8D7A210FFBC67934C144627A9D6F5463	AAFA499E8FC1CC0BED99ACDEDD9701FB3EE12774B827281B70E077D79985F5B0

For all supported x64-based versions

File name	File version	File size	Date	Time	Platform
Mf3216.dll	6.0.6002.24439	56,320	06-Jul-2018	14:36	x64
Msimg32.dll	6.0.6002.24439	8,192	06-Jul-2018	14:36	x64
Gdiplus.dll	5.2.6002.24439	2,199,552	06-Jul-2018	14:36	x64
Gdiplus.dll	6.0.6002.24439	2,435,584	06-Jul-2018	14:36	x64
Mf3216.dll	6.0.6002.24439	42,496	06-Jul-2018	18:30	x86
Msimg32.dll	6.0.6002.24439	4,608	06-Jul-2018	18:30	x86
Gdiplus.dll	5.2.6002.24439	1,748,992	06-Jul-2018	18:30	x86
Gdiplus.dll	6.0.6002.24439	1,842,176	06-Jul-2018	18:30	x86

For all supported x86-based versions

File name	File version	File size	Date	Time	Platform
Mf3216.dll	6.0.6002.24439	42,496	06-Jul-2018	18:30	x86
Msimg32.dll	6.0.6002.24439	4,608	06-Jul-2018	18:30	x86
Gdiplus.dll	5.2.6002.24439	1,748,992	06-Jul-2018	18:30	x86
Gdiplus.dll	6.0.6002.24439	1,842,176	06-Jul-2018	18:30	x86

For all supported ia64-based versions

File name	File version	File size	Date	Time	Platform
Mf3216.dll	6.0.6002.24439	124,928	06-Jul-2018	14:26	IA-64
Msimg32.dll	6.0.6002.24439	7,680	06-Jul-2018	14:26	IA-64
Gdiplus.dll	5.2.6002.24439	4,921,344	06-Jul-2018	14:26	IA-64
Gdiplus.dll	6.0.6002.24439	5,290,496	06-Jul-2018	14:26	IA-64
Mf3216.dll	6.0.6002.24439	42,496	06-Jul-2018	18:30	x86
Msimg32.dll	6.0.6002.24439	4,608	06-Jul-2018	18:30	x86
Gdiplus.dll	5.2.6002.24439	1,748,992	06-Jul-2018	18:30	x86
Gdiplus.dll	6.0.6002.24439	1,842,176	06-Jul-2018	18:30	x86
Windows Embedded POSReady 2009 and Windows Embedded Standard 2009 file information

For all supported x86-based versions

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Gdiplus.dll	5.2.6002.24439	1,748,992	08-Jul-2018	22:36	x86	None	Not applicable
Gdiplus.man	Not applicable	398	08-Jul-2018	22:39	Not applicable	None	Not applicable
Gdiplus.man	Not applicable	608	07-Jul-2018	23:13	Not applicable	None	Not applicable
Mf3216.dll	5.1.2600.7535	41,472	08-Jul-2018	22:36	x86	SP3	SP3QFE
Gdiplus.dll	5.2.6002.24439	1,748,992	08-Jul-2018	22:36	x86	SP3	SP3QFE
Gdiplus.man	Not applicable	398	08-Jul-2018	22:39	Not applicable	SP3	SP3QFE
Gdiplus.man	Not applicable	608	07-Jul-2018	23:13	Not applicable	SP3	SP3QFE
Updspapi.dll	6.3.13.0	382,840	01-Feb-2018	21:28	x86	None	Not applicable