Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

MS14-044: Description of the security update for SQL Server 2014 (GDR): August 12, 2014


View products that this article applies to.

Introduction

A security issue has been identified in Microsoft SQL Server 2014 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer.

↑ Back to the top


Summary

Microsoft has released security bulletin MS14-044. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Support and Troubleshooting

Help protect your Windows-based computer from viruses and malware: Virus and Security Solution Center

Local support according to your country:
International Support

↑ Back to the top


More Information

Known issues with this security update

  • If you install Cumulative Update 1 (CU1) or CU2 for SQL Server 2014 after you install this security update, the patch for Master Data Services will be removed, and Master Data Services will be vulnerable again. To correct that, you must reinstall the QFE package from this article (security update 2977315) or any cumulative update build whose version is later than 12.0.2381.0.

Removal information

To remove this software update for MDS, follow these steps:
  1. Back up the MDS database.
  2. Remove the MDS component.
  3. Reinstall the MDS component.
  4. Apply any necessary SQL Server service packs or service updates to bring MDS to its pre-security update version.

↑ Back to the top


File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
x64-based versions
SQL Server 2014 Master Data Services

File nameFile versionFile sizeDateTimePlatform
Sql_mds_keyfile.dll2014.120.2254.05698425-Jul-201419:26x64
Microsoft.MasterDataServices.WebUI.dll12.0.2000.818963220-Feb-201422:27x86
SQL Server 2014 Database Services Common Core

File nameFile versionFile sizeDateTimePlatform
Sql_common_core_keyfile.dll2014.120.2254.05698426-Jul-201403:26x64
SQL Server 2014 Database Services Core Instance

File nameFile versionFile sizeDateTimePlatform
Sql_engine_core_inst_keyfile.dll2014.120.2254.05698426-Jul-201403:26x64
Sqlaccess.dll2014.120.2254.046916026-Jul-201403:25x64
Sqlagent.exe2014.120.2254.061303226-Jul-201403:25x64
Sqldk.dll2014.120.2254.0239786426-Jul-201403:18x64
Sqllang.dll2014.120.2254.03590160826-Jul-201403:18x64
Sqlmin.dll2014.120.2254.06458230426-Jul-201403:18x64
Sqlos.dll2014.120.2254.02679226-Jul-201403:18x64
Sqlservr.exe2014.120.2254.037033626-Jul-201403:25x64
Sqltses.dll2014.120.2254.0897296826-Jul-201403:18x64
SQL Server 2014 Integration Services

File nameFile versionFile sizeDateTimePlatform
Msdtssrvr.exe12.0.2254.021673626-Jul-201403:27x64
Sql_is_keyfile.dll2014.120.2254.05698426-Jul-201403:26x64
SQL Server 2014 Reporting Services

File nameFile versionFile sizeDateTimePlatform
Microsoft.reportingservices.diagnostics.dll.deploy12.0.2254.0141328026-Jul-201403:28x86
Microsoft.reportingservices.diagnostics.dll12.0.2254.0141328026-Jul-201403:29x86
Reportingservicesnativeclient.dll2014.120.2254.010512826-Jul-201403:24x64
Reportingservicesnativeclient.dll2014.120.2254.011024826-Jul-201403:29x86
Reportingservicesnativeserver.dll2014.120.2254.010052026-Jul-201403:25x64
Sql_rs_keyfile.dll2014.120.2254.05698426-Jul-201403:26x64
SQL Server 2014 Management Studio

File nameFile versionFile sizeDateTimePlatform
Microsoft.reportingservices.diagnostics.dll12.0.2254.0141328026-Jul-201403:28x86
Microsoft.sqlserver.management.sqlstudio.dll12.0.2254.031760026-Jul-201403:29x86
Reportingservicesnativeclient.dll2014.120.2254.011024826-Jul-201403:29x86
Sql_ssms_keyfile.dll2014.120.2254.05698426-Jul-201403:26x64

↑ Back to the top


Keywords: kbsurveynew, kbsecvulnerability, kbsecurity, kbsecreview, kbsecbulletin, kbbug, kblangall, kbfix, kbexpertiseinter, kb, atdownload, kbmustloc

↑ Back to the top

Article Info
Article ID : 2977315
Revision : 1
Created on : 1/7/2017
Published on : 8/22/2014
Exists online : False
Views : 399