Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. MS11-098: Vulnerability in Windows Kernel could allow elevation of privilege: December 13, 2011

MS11-098: Vulnerability in Windows Kernel could allow elevation of privilege: December 13, 2011

View products that this article applies to.

Not sure if this is the right fix? We've added this issue to our memory dump diagnostic which can confirm.

↑ Back to the top

INTRODUCTION

Microsoft has released security bulletin MS11-098. To view the complete security bulletin, visit one of the following Microsoft websites:

How to obtain help and support for this security update


Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support



Known issues

Certain systems that have an Intel integrated graphics card or an AMD ATI HD graphics card installed may crash after this security update is installed. When this problem occurs, you may receive a Stop error message that resembles the following:
Stop 0x0000007F

Microsoft has investigated this issue in partnership with both Intel and AMD. We have identified an incompatibility between this update and certain older versions of the Intel and AMD graphics drivers. Both Intel and AMD have posted updated drivers that resolve this issue.

For more information about how to obtain updated drivers to resolve this issue, visit the following webpages:

↑ Back to the top

FILE INFORMATION


The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows XP and Windows Server 2003 file information

  • The files that apply to a specific milestone (SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
  • In addition to the files that are listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x86-based versions of Windows XP

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Ntkrnlmp.exe5.1.2600.61652,148,86425-Oct-201113:37x86SP3SP3GDR
Ntkrnlpa.exe5.1.2600.61652,069,37625-Oct-201112:52x86SP3SP3GDR
Ntkrpamp.exe5.1.2600.61652,027,00825-Oct-201112:52x86SP3SP3GDR
Ntoskrnl.exe5.1.2600.61652,192,76825-Oct-201113:33x86SP3SP3GDR
Ntkrnlmp.exe5.1.2600.61652,148,86425-Oct-201113:38x86SP3SP3QFE
Ntkrnlpa.exe5.1.2600.61652,069,37626-Oct-201102:22x86SP3SP3QFE
Ntkrpamp.exe5.1.2600.61652,027,00825-Oct-201112:52x86SP3SP3QFE
Ntoskrnl.exe5.1.2600.61652,192,76825-Oct-201113:34x86SP3SP3QFE
Mpsyschk.dll5.1.2600.616516,89626-Oct-201110:50x86NoneNot Applicable

For all supported x86-based versions of Windows Server 2003

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Ntkrnlmp.exe5.2.3790.49222,491,39225-Oct-201117:57Not ApplicableSP2SP2GDR
Ntkrnlpa.exe5.2.3790.49222,303,48825-Oct-201115:50x86SP2SP2GDR
Ntkrpamp.exe5.2.3790.49222,342,91227-Oct-201100:49Not ApplicableSP2SP2GDR
Ntoskrnl.exe5.2.3790.49222,452,48025-Oct-201117:57x86SP2SP2GDR
Ntkrnlmp.exe5.2.3790.49222,502,65625-Oct-201117:42Not ApplicableSP2SP2QFE
Ntkrnlpa.exe5.2.3790.49222,313,21625-Oct-201115:55x86SP2SP2QFE
Ntkrpamp.exe5.2.3790.49222,353,66425-Oct-201115:55Not ApplicableSP2SP2QFE
Ntoskrnl.exe5.2.3790.49222,461,69625-Oct-201117:42x86SP2SP2QFE
Mpsyschk.dll5.2.3790.492217,40826-Oct-201111:03x86NoneNot Applicable

Windows Vista and Windows Server 2008 file information

  • The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.0.6002.18xxxWindows Vista SP2 and Windows Server 2008 SP2SP2GDR
    6.0.6002.22xxxWindows Vista SP2 and Windows Server 2008 SP2SP2LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Vista and Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Ntkrnlpa.exe6.0.6002.185333,602,81627-Oct-201108:01Not Applicable
Ntoskrnl.exe6.0.6002.185333,550,08027-Oct-201108:01Not Applicable
Ntkrnlpa.exe6.0.6002.227323,603,84027-Oct-201108:01Not Applicable
Ntoskrnl.exe6.0.6002.227323,552,64027-Oct-201108:01Not Applicable

Additional file information for Windows Vista and Windows Server 2008

Additional files for all supported x86-based versions of Windows Vista and Windows Server 2008

File namePackage_1_for_kb2633171_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,388
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_1_for_kb2633171~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size4,283
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_2_for_kb2633171_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,750
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_2_for_kb2633171~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size3,648
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_3_for_kb2633171_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,230
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_3_for_kb2633171~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size4,123
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_4_for_kb2633171_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,750
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_4_for_kb2633171~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size3,651
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_5_for_kb2633171_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,230
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_5_for_kb2633171~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size4,124
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_6_for_kb2633171_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,751
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_6_for_kb2633171~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size3,651
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_client_2_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,142
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_client_2~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,185
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_client_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,427
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_client~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,446
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_sc_1_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,140
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_sc_1~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,183
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_sc_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,419
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_sc~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,438
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_server_1_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,142
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_server_1~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size2,187
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_server_bf~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,427
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File namePackage_for_kb2633171_server~31bf3856ad364e35~x86~~6.0.1.0.mum
File versionNot Applicable
File size1,446
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File nameUpdate-bf.mum
File versionNot Applicable
File size3,217
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File nameX86_4e63041be5a392f6e4d50051bc3df6bd_31bf3856ad364e35_6.0.6002.18484_none_5838d4c0bf065b06.manifest
File versionNot Applicable
File size717
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File nameX86_50dccc4c09589c87d4157202072a04ab_31bf3856ad364e35_6.0.6002.22732_none_f19bef186d86359b.manifest
File versionNot Applicable
File size717
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File nameX86_808628aed36ab9a876ffd7156972227f_31bf3856ad364e35_6.0.6002.22732_none_62e94d72cf66b66a.manifest
File versionNot Applicable
File size697
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File nameX86_cb705269163ddaf3f359fe5068b7bbcf_31bf3856ad364e35_6.0.6002.18533_none_4e15b5f5b5a41540.manifest
File versionNot Applicable
File size697
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File nameX86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.18533_none_6df973d2b15ef09c.manifest
File versionNot Applicable
File size18,682
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File nameX86_microsoft-windows-os-kernel_31bf3856ad364e35_6.0.6002.22732_none_6e821239ca7d7436.manifest
File versionNot Applicable
File size18,682
Date (UTC)27-Oct-2011
Time (UTC)08:45
PlatformNot Applicable
File nameX86_microsoft-windows-r..gistry-trustedtypes_31bf3856ad364e35_6.0.6002.18484_none_8591fa8d2bcba31b.manifest
File versionNot Applicable
File size7,654
Date (UTC)17-Jun-2011
Time (UTC)17:51
PlatformNot Applicable
File nameX86_microsoft-windows-r..gistry-trustedtypes_31bf3856ad364e35_6.0.6002.22732_none_864faa2c44c27ed0.manifest
File versionNot Applicable
File size7,654
Date (UTC)25-Oct-2011
Time (UTC)17:21
PlatformNot Applicable

Windows 7 file information

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.1.7600.16xxxWindows 7RTMGDR
    6.1.7600.20xxxWindows 7RTMLDR
    6.1.7601.17xxxWindows 7SP1GDR
    6.1.7601.21xxxWindows 7SP1LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 7

File nameFile versionFile sizeDateTimePlatform
Ntkrnlpa.exe6.1.7600.169053,957,10426-Oct-201104:42Not Applicable
Ntoskrnl.exe6.1.7600.169053,901,80826-Oct-201104:42Not Applicable
Ntkrnlpa.exe6.1.7600.210773,970,41626-Oct-201104:51Not Applicable
Ntoskrnl.exe6.1.7600.210773,915,12026-Oct-201104:51Not Applicable
Ntkrnlpa.exe6.1.7601.177133,967,85626-Oct-201104:47Not Applicable
Ntoskrnl.exe6.1.7601.177133,912,56026-Oct-201104:47Not Applicable
Ntkrnlpa.exe6.1.7601.218473,970,92826-Oct-201107:01Not Applicable
Ntoskrnl.exe6.1.7601.218473,915,12026-Oct-201107:01Not Applicable

Additional file information for Windows 7

Additional files for all supported x86-based versions of Windows 7

File namePackage_1_for_kb2633171_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size1,787
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_1_for_kb2633171~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size2,491
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_2_for_kb2633171_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size1,792
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_2_for_kb2633171~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size2,694
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_3_for_kb2633171_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size1,772
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_3_for_kb2633171~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size2,676
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_4_for_kb2633171_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size1,807
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_4_for_kb2633171~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size2,491
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_5_for_kb2633171_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size1,787
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_5_for_kb2633171~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size2,497
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_6_for_kb2633171_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size1,787
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_6_for_kb2633171~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size2,478
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_7_for_kb2633171_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size1,986
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_7_for_kb2633171~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size2,537
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_8_for_kb2633171_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size1,968
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_8_for_kb2633171~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size2,517
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_for_kb2633171_rtm_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size3,397
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_for_kb2633171_rtm~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size3,489
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_for_kb2633171_sp1_bf~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size1,894
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File namePackage_for_kb2633171_sp1~31bf3856ad364e35~x86~~6.1.1.0.mum
File versionNot Applicable
File size1,929
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File nameUpdate-bf.mum
File versionNot Applicable
File size2,728
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File nameX86_01a30bd90d3e63e17e5346b2ec2c7b82_31bf3856ad364e35_6.1.7601.17713_none_c6d561e01a3a0e58.manifest
File versionNot Applicable
File size697
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File nameX86_5545a3ce8aa33370d74f0e0b4a5790c1_31bf3856ad364e35_6.1.7601.21847_none_d6082efdc164aa77.manifest
File versionNot Applicable
File size697
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File nameX86_5baebc98b54499a976adae1c6e4b1e86_31bf3856ad364e35_6.1.7600.21077_none_1eaa3d5341621655.manifest
File versionNot Applicable
File size717
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File nameX86_711ec06db5ab89976f3cafdf02044652_31bf3856ad364e35_6.1.7600.21077_none_82c2715f7f224810.manifest
File versionNot Applicable
File size697
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File nameX86_bffc18aa52230d0daa49b8720674de3e_31bf3856ad364e35_6.1.7600.16841_none_0cb32ea90a3edc33.manifest
File versionNot Applicable
File size717
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File nameX86_e3a5a8f03741c629aab86131e6a86c67_31bf3856ad364e35_6.1.7600.16905_none_c0664f55c6ba5947.manifest
File versionNot Applicable
File size697
Date (UTC)26-Oct-2011
Time (UTC)13:18
PlatformNot Applicable
File nameX86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16905_none_6c5d42881535b73b.manifest
File versionNot Applicable
File size16,151
Date (UTC)26-Oct-2011
Time (UTC)05:37
PlatformNot Applicable
File nameX86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.21077_none_6c9d06af2e8a8365.manifest
File versionNot Applicable
File size16,151
Date (UTC)26-Oct-2011
Time (UTC)05:43
PlatformNot Applicable
File nameX86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.17713_none_6e36cf0e12660c6a.manifest
File versionNot Applicable
File size16,151
Date (UTC)26-Oct-2011
Time (UTC)05:43
PlatformNot Applicable
File nameX86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7601.21847_none_6ea3fd3d2b986563.manifest
File versionNot Applicable
File size16,151
Date (UTC)26-Oct-2011
Time (UTC)09:20
PlatformNot Applicable
File nameX86_microsoft-windows-r..gistry-trustedtypes_31bf3856ad364e35_6.1.7600.16841_none_83fb97bc8f9ecf16.manifest
File versionNot Applicable
File size8,047
Date (UTC)23-Jun-2011
Time (UTC)04:55
PlatformNot Applicable
File nameX86_microsoft-windows-r..gistry-trustedtypes_31bf3856ad364e35_6.1.7600.21077_none_846a9ea1a8cf8dff.manifest
File versionNot Applicable
File size8,047
Date (UTC)26-Oct-2011
Time (UTC)05:29
PlatformNot Applicable

↑ Back to the top

Keywords: kb, kbmdd, atdownload, kbbug, kbexpertiseinter, kbfix, kblangall, kbmustloc, kbsecbulletin, kbsecreview, kbsecurity, kbsecvulnerability, kbsurveynew

↑ Back to the top

Article Info
Article ID : 2633171
Revision : 1
Created on : 1/7/2017
Published on : 10/9/2014
Exists online : False
Views : 304