Lucene search

K
mskbMicrosoftKB4486536
HistoryMar 12, 2019 - 12:00 a.m.

Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019

2019-03-1200:00:00
Microsoft
support.microsoft.com
14

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.01 Low

EPSS

Percentile

83.9%

Description of the security update for the information disclosure vulnerability in Windows Embedded POSReady 2009: March 12, 2019

Summary

An information disclosure vulnerability exists in the manner in which the Windows SMB Server handles certain requests.

To learn more about the vulnerability, go to CVE-2019-0821.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the standalone package for this update, go to the Microsoft Update Catalog website.
Important

  • If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:Security update deployment information: March 12, 2019

Information about protection and security

File Information

File hash information

File name SHA1 hash SHA256 hash
WindowsXP-KB4486536-x86-Embedded-ENU.exe 4DD89D4CFAB9BA6526747646E320ADF407B6ECE4 8962E25158B1088DF66A68908EB0CFAC936A54EBAB291E1BD666F7EAE3B5BAEB
Windows XP file information

For all supported x86-based versions

File name File version File size Date Time Platform
Msv1_0.dll 5.1.2600.7666 137,728 26-Feb-2019 17:53 x86

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

7.4 High

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.01 Low

EPSS

Percentile

83.9%