Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

MS13-048: Vulnerability in Windows kernel could allow information disclosure: June 11, 2013


View products that this article applies to.

Introduction

Microsoft has released security bulletin MS13-048. To view the complete security bulletin, visit one of the following Microsoft websites:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

↑ Back to the top


More Information

Known issues with this security update



Customers who use non-updated versions of certain Kingsoft software products may experience issues installing this security update. In some cases, systems may not successfully restart after security update 2839229 is applied, and customers may encounter a blue or blank screen. We are aware that Kingsoft antivirus and browser product components (kisknl.sys, knbdrv.sys, and dgsafe.sys) may be affected.



We recommend that customers update their Kingsoft software to the latest versions before security update 2839229 is applied.


Workaround

Customers who have applied security update 2839229 should update their Kingsoft software products before restarting their systems.

We recommend the following steps for customers who have did not update their Kingsoft software products, and are having problems restarting after security update 2839229:






Steps for Windows XP, Windows Vista and Windows 7
  1. Turn off the computer.
  2. Start the computer in safe mode by pressing F8 during the startup cycle.
  3. Select Safe Mode with Networking and continue booting.
  4. Apply updates to your Kingsoft software products.
  5. Restart the computer.


Steps for Windows 8
  1. Turn off the computer.
  2. Start the computer by using the original Windows 8 installation media.
  3. Enter your language and other preferences and then click Next.
  4. Select the Repair your Computer option.*
  5. Select the Troubleshoot option.
  6. Select Advanced Options.
  7. Select System Restore.**
  8. Restart the computer.
  9. Apply updates to your Kingsoft software products.


* As a security feature, customers who use Bitlocker drive encryption will be required to enter their Bitlocker recovery key to continue with Repair your Computer.

** System Restore will return the Windows 8 operating system to the last saved restore point. This will not result in loss of user data. However, customers have to reapply all Microsoft updates which were installed after the restore point.



↑ Back to the top


File information

File hash information
File nameSHA1 hashSHA256 hash
Windows6.0-KB2839229-ia64.msu3EFBB7FF31AC6E9D55AED6CFBE5FE2B774E57ABD1BAD5EC631324B1D50B22F74F47B5E63645F5571353AF3529AFB2AFEE123DC8F
Windows6.0-KB2839229-x64.msuBD6D9DC03944F120EF7BDCDB1D924865555A6DDDEA11DB049CF9F1ADF740B9BBE9F89A557CAE4EF9B9C81D94D974BCEC702C3FB9
Windows6.0-KB2839229-x86.msu9248058BDF850D005691C8D5AD302058BDD6337BD4E5D991F343DADF0CBCF50C7801C09AFF3EE73536FEC0F6169A9C4E8A9FF9A0
Windows6.1-KB2839229-ia64.msuD5A95A8C1ECFEDE5159E642FF0415CA5F8EF0B2CBBC6D3B169B28B496E08FDF68DBEF1C3472CA5E778CEBA76D795109C834FFDFC
Windows6.1-KB2839229-x64.msu7E9C1B96FD6E9E5BDE77A675E735F9C06BA6C1D366D56C10F7F55EBB3A69DCDBF1E07F2D29D11DF0D6A4E07341C81BC8908E1262
Windows6.1-KB2839229-x86.msu15B0F7687898C3D41FD191743B8AE2FCD25D1C48A2F0EF73CFD138D69B27DBA5F2A60A24811D99249B0292952CC5094E54037443
Windows8-RT-KB2839229-x86.msuE7DB93578B3F0D12F047FA4ED5C13F7F78333AB516BDB3709F209B6F8353926CACD4D936FD2B76C3CA509A48FB91623B5B50FA1F
WindowsServer2003-KB2839229-ia64-DEU.exeD4D02BB0E6CDE387F03A49DE0A9FC553F6C28C9D1E7705376E9A38F2C83302D4570A0ECA1DB4BD42B4EACFD62C548B8472F1E31E
WindowsServer2003-KB2839229-ia64-ENU.exe106EA4ED1FB9333AC421CF38C11870DDC0B4987EA92F9128F208367D04B4D7F19042E838F8AD4E55282C724F01D5D604A5F65337
WindowsServer2003-KB2839229-ia64-FRA.exe52CB61806EF5D0F5DD290657B21D073123434B0FE69DB9A6FD1C0D2A62171978694FC10CD1E3762AD0D2E62819F858EF1EB57348
WindowsServer2003-KB2839229-ia64-JPN.exe1AC3016857916F00855CB23117EC77D3347E20F3E128B051B8300C0D24E05CF00A1B0CE3CA6783A53F9CF9FA01E39FB5BC77CB6E
WindowsServer2003-KB2839229-x86-CHS.exe80EB5DFC10F29415DBC1A05C3B69D235EF9EBAF07B9BB92E1455A24035BE94EBACE4A9718DDE18699E34C4849AD2A7D914B12CCA
WindowsServer2003-KB2839229-x86-CHT.exe0EB9CBBA2695B7293754A661ECB728B9940EDE1247A28761637433090B60F88ECECB755FEE241DA3D96181D8F176F3AE56D14E28
WindowsServer2003-KB2839229-x86-CSY.exeF20AA140A73844D902DAAE6D007A2FDF684D56EEC3929534F74720DA025443A65510AD956539ABFD349B31CCB07BAEDF0DEA6191
WindowsServer2003-KB2839229-x86-DEU.exeCE092A2B65EC6FB6A7444DBCC8416EED76235610B4B68E478F9EB2B9DE25E3EB6B9574F12B18AFEC1EA43EDB2ABDF804BE433018
WindowsServer2003-KB2839229-x86-ENU.exe242C68ED30831909CD4CB267667B3AB6EBF8E710F0594778F6AF231D1B493D79FC6F975D817401D545FA03F52AF7534A6752E379
WindowsServer2003-KB2839229-x86-ESN.exe3977D42D6C6B98088876348E73C7642D5872764D79C6FDD97081BEDD7FF115127A7A46CE10EBA927F2C1793D140934AABCA923A4
WindowsServer2003-KB2839229-x86-FRA.exe0F8EA4A04917F7881042D8E5285B2E7B0E4853255C33F03A609ADC51883FFD6091682989204F70878A49CFA467809D1EB25F05D2
WindowsServer2003-KB2839229-x86-HUN.exeB079FFDDF7B560224890E1667BCEC7A8282D91A3F283793F5A24DAC6035E4368ED820115E1DEAA2535679A69A848369745569EEF
WindowsServer2003-KB2839229-x86-ITA.exe5FC7CA32B8123472C8D62E015A84302BAA7C0965CA4FB8C8D96C892752E4A767EDC00A1225A03DC3E8D7C868D2994C909AC9CCF0
WindowsServer2003-KB2839229-x86-JPN.exeE0A7F0AB372701C671CAAD6E28C5F2C871291A24DB506F84E9C401603FD15DA173159AD93AEE9263B289A67A719C59E574CB6E24
WindowsServer2003-KB2839229-x86-KOR.exeB2EC491256B877818FEE6B3071D46F678A1EEEF51BE4773ECBCBB3A6F553E7886EAC7AD264F54FEFC7B3A8225DB9873BF11F3CE3
WindowsServer2003-KB2839229-x86-NLD.exe83016F4116401D7C9B75644D988EEB866A228B827ADFBF7B5F7F67B17E37D01EFEA4D82ED62D2CC57C4ACD5825E924F98C59B437
WindowsServer2003-KB2839229-x86-PLK.exe1F43DEC6E0853E7FC9B5841F2EB2EBDFFD9F329371B9647B64FFCDEA752298D840659D30981C7A9F78B5A1469ED75F22E22710E3
WindowsServer2003-KB2839229-x86-PTB.exe89F949CDF2E61AE5116CBAB56D453FAE56DE1A4B5AD03E222FE3D69DF1CC05F9384AAEB6CAA392B13E08AD278E43A0583C185DB0
WindowsServer2003-KB2839229-x86-PTG.exe547F1FB3D38BE60BACC41A077E3F8F6E7834B913EDF7243289A1674199F87D98E818B30DC650656DB3514CBAB9AE25A13E7ADD8F
WindowsServer2003-KB2839229-x86-RUS.exe93E7976325C8EF75306EC975DEF75207E81011D55B4A516A3AE73EB40F8A9D51FEA451E6386C914B333F09CF4F0DE1021D348345
WindowsServer2003-KB2839229-x86-SVE.exeE8272138529BC326343493013EBD6D526182793203CCF4DAA913E80ADC9CEFAC715054C59700167A4EC275E23BBEFB621550AD05
WindowsServer2003-KB2839229-x86-TRK.exeF8C8601D6E2AE10C035D1A5DBE54A75BC28091138E0270573A040315FF0973CBA561DC7B6C46F297DC22801507CC509FA8E19086
WindowsServer2003.WindowsXP-KB2839229-x64-CHS.exe413BEEFFC81B5DE3BDB745DC8B9E972C6379BBA6F363A972B452653B6BE05675732C043C969805EB982250C0D3D5D3612449D85C
WindowsServer2003.WindowsXP-KB2839229-x64-CHT.exeECEDE1CC69CD738C5FDC34B1BD2A58F0537059DBE48B1630FCF8F0263C861CBF57445D784373F9EDCF9209169B1281A52263BF60
WindowsServer2003.WindowsXP-KB2839229-x64-DEU.exeECAF2706E79E2404734B3E2684DD98B8AAD609961D0EA7653A57ED33EF871099EF553A8E58786F6AF2FAE3F1F307F2B03E92AA37
WindowsServer2003.WindowsXP-KB2839229-x64-ENU.exeC00EDF487FE18609008FB26C611771ECA0071A488D9DC621E3CCF7F93B87E518D9492A9322A10F296BCF6D65F356B4732960C9F5
WindowsServer2003.WindowsXP-KB2839229-x64-ESN.exeF7F4AC6E9E04F1A5022E6E389D95553D056ECDFB0F62806C2BC8576B3AC9892C7CF732151ED34842DE49B060CAFE7A33D09FB709
WindowsServer2003.WindowsXP-KB2839229-x64-FRA.exeC589D261666A6ED53C82906ABA66D65D435B8F76E32634502E337DF68E6114133906467FA84B0234FAEE5EFE5531FAD0A13D4A86
WindowsServer2003.WindowsXP-KB2839229-x64-ITA.exe581320A6723D0A29AB93A076C33F12ACF488917AF35151F83BC46339EC0CC1B519B6B71F26553E6DCC47AE142E35666B4E8F7ED0
WindowsServer2003.WindowsXP-KB2839229-x64-JPN.exe759487E0A12F3F409563645485804A7CF20689C54B7F4E48D527F508B9F53586940F97B25047C0AC2B2215BD13DFED8AA722780D
WindowsServer2003.WindowsXP-KB2839229-x64-KOR.exe8B49F4F8A2CDF830EF641CE9A862AD57C551AE716533AE5BD851E9D9D48755F8AFB639BE1AC5C8D6D8197A0424CA5C9BF1890640
WindowsServer2003.WindowsXP-KB2839229-x64-PTB.exe9BCCB435E5F872B12E1001E0D48BE0F335B0FF63052F0177676DE30A53C0D1E76AA51F5413E2B0626F7E11523E434826F7A6B960
WindowsServer2003.WindowsXP-KB2839229-x64-RUS.exe962B991C4F5497253B4F1A4ADF05A2FC13AD15291D816B11B7A33B8CF9DAD86ED5CE404C7F5EDB1D51CFC24993A27DA3D329D96E
WindowsXP-KB2839229-x86-ARA.exeB2596188E87AD4B60C411A6C13E00D6FA0FAE0B7CF24FD7D258D528FC5BA252ACE0AC20B559833DD23BE511D6F538F47A28C92E4
WindowsXP-KB2839229-x86-CHS.exe2C197A3A69F6E79A411A66ECDA6934968F57C825E5DD8B8A161E3DA866B96BEC08FFC452A5569C1EC7C8068A827A784CF327797D
WindowsXP-KB2839229-x86-CHT.exeB9D67B1098F598AE1FDFCF756AB8758CF8C30D92132ACB4C252DC681717890AE7774584C6FB88AA8713F5054B4BDEE6595A2574A
WindowsXP-KB2839229-x86-CSY.exe54579EA9DA3A342EA55EC9DACB877580AFADC59A4CD6FEF457CC394E8DEAB92B33229023A61F315DCD002817417C6561F68952DA
WindowsXP-KB2839229-x86-DAN.exe2964B636CF4ACD5F9022EB7334D3EF2596D3F502F0E1D6EBF7AA55762D6802851B99DF7AE280E61259F61A219ACB8D4F3775BE42
WindowsXP-KB2839229-x86-DEU.exeA3E98041C653F4BCCD0A9192B122044C9F9B5E7911A46C14064CE2F14A590375CCE2BB236ECE53FE19723CB0065FB0084DB01A74
WindowsXP-KB2839229-x86-ELL.exeD99F76E5E20C244DBE11D8DA7B50CF48A89EF05C33C8355614B5FBE5D14599755AF77DB7F04BF6199D9944B36CE351C5E323CC07
WindowsXP-KB2839229-x86-ENU.exeF01852B21C13E9DB073CCE699CB0541AEF007ACC093849A5F4D603F05DF7A18B69B748EB956AB3AA218DDE9CEC1448EA39ACAB91
WindowsXP-KB2839229-x86-ESN.exe5F89D11895F21C98D446A50DAE1A8C0144CF5B953D38C4B5A98BAF5139319041851101C2D527EA9754BAD9AD9BD410E450C1111F
WindowsXP-KB2839229-x86-FIN.exeBC5F6F9ECE0FAC7B2B70127454F726447D30DA80C30D54BD3800223E9F08C3648435B960B38CA62CDA0DFF6A27A90576DF916507
WindowsXP-KB2839229-x86-FRA.exeA6852A69E5B0AF0121474EBB57B155118A0E1A56C73DDC708BD6C9658D20069D301E6FF0F63C610D6C12F089050C96B06C29DF89
WindowsXP-KB2839229-x86-HEB.exe64183B29D9BD87FC6A082BD8F9C99B4727562BF5952EDB2F8A5D43768EFAED888B3FE286B6A42DC789F7F3D55CE3F71C1C0EF696
WindowsXP-KB2839229-x86-HUN.exe03D3E5EAB9C454E67989A795F39FA519739D7E03B5D4F53AA91B774F10F5E4F7604926D1E683AD31F4C4BDF36ABC76DC5651AB25
WindowsXP-KB2839229-x86-ITA.exe82B233E5BDD09E65CD0E59EA66EDDD7740D51427A3CA9E13B3B226B4ECDE417DA8285663FFCDF097C60FE928BD311EAE585D6F98
WindowsXP-KB2839229-x86-JPN.exeF8EEC458CE15C5A40F9E7BED500953E73C14F7A05E5055D44283C83FBABEB45550544A676074CF15D41591D051DFCF89B7B77021
WindowsXP-KB2839229-x86-KOR.exeA5BAF1B98537FBE4F1933E1CC57659F880836DF7D94E425E7D7560F0E084AABA680930617BB6F97BC67C3EEAA076792ED66C8738
WindowsXP-KB2839229-x86-NLD.exe195D5C6299FD8CF323FA14FD654B773C40B2D768D5BDF2E641F073C30CFD8524E2C9F9D774E9F3CEFD48C65C54CBDCD414501EA6
WindowsXP-KB2839229-x86-NOR.exeCA320950B8F5135143F3799E23A1507374AF646D5CA02085920BA9968198B655C56EBFF2FE3A03B8BB551C88CF54918B900BF02A
WindowsXP-KB2839229-x86-PLK.exeE9F08D425E7D04EB9CE1D0038591E2491E3F10EC1BB19EE54033B925F6BADE6F17E80E9578E65C2136673C195434FC049277F152
WindowsXP-KB2839229-x86-PTB.exe03B7E5590CD7156218AB14E59ABF16F8186BA473FBEC53CB8F814E8D32389C5FF257CABB3B3824F629E7A10A68AD759FAFD749CF
WindowsXP-KB2839229-x86-PTG.exe83184534795C9DEF015840E9680C5FBD462573CC357417BA83D5ED77A154235DCB324F34017417850BE9E7F90368FC8883C8945C
WindowsXP-KB2839229-x86-RUS.exe1CA1FBB9E1752D4E0946C158ED162557A7D7E8FD62F2A4D964D101AEE4DB6F780F7DAD15FE2767A1116CB8AE6A0E350686274846
WindowsXP-KB2839229-x86-SVE.exe28883ABCB86D27FC92C49EB8B5DBB81C0CEF2570D442323D4340805F5CF962ABCC3271A1EE4D2CE4F731DF420FD485E6882AA0AD
WindowsXP-KB2839229-x86-TRK.exe991F1A959E4E7DDB8A4D7F3E65AC810E7C8940C23E333F26FB290835FBD9AC9EC7364C8072770DC849CE827F005FDA31437686B3

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows XP and Windows Server 2003 file information
  • The files that apply to a specific milestone (SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
  • In addition to the files that are listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x86-based versions of Windows XP

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Ntkrnlmp.exe5.1.2600.63872,149,88803-May-201301:30x86SP3SP3QFE
Ntkrnlpa.exe5.1.2600.63872,070,14403-May-201300:38x86SP3SP3QFE
Ntkrpamp.exe5.1.2600.63872,028,54403-May-201300:38x86SP3SP3QFE
Ntoskrnl.exe5.1.2600.63872,193,53603-May-201301:26x86SP3SP3QFE

For all supported x86-based versions of Windows Server 2003

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Fltmgr.sys5.2.3790.5107132,09607-Jan-201300:43x86SP2SP2QFE
Ntkrnlmp.exe5.2.3790.51572,503,16803-May-201302:10Not ApplicableSP2SP2QFE
Ntkrnlpa.exe5.2.3790.51572,314,24003-May-201300:42x86SP2SP2QFE
Ntkrpamp.exe5.2.3790.51572,354,68803-May-201300:42Not ApplicableSP2SP2QFE
Ntoskrnl.exe5.2.3790.51572,462,72003-May-201302:10x86SP2SP2QFE
Mpsyschk.dll5.2.3790.515717,40803-May-201309:43x86NoneNot Applicable

Windows Vista and Windows Server 2008 file information
  • The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.0.6002.18xxxWindows Vista SP2 and Windows Server 2008 SP2SP2GDR
    6.0.6002.23xxxWindows Vista SP2 and Windows Server 2008 SP2SP2LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows Vista and Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Csrsrv.dll6.0.6002.1880549,15209-Mar-201303:45x86
Csrsrv.dll6.0.6002.2310349,15202-May-201302:52x86
Ntkrnlpa.exe6.0.6002.188323,603,83202-May-201322:03Not Applicable
Ntoskrnl.exe6.0.6002.188323,551,09602-May-201322:03Not Applicable
Ntkrnlpa.exe6.0.6002.231033,606,39202-May-201322:03Not Applicable
Ntoskrnl.exe6.0.6002.231033,555,19202-May-201322:03Not Applicable
Smss.exe6.0.6002.1880564,00009-Mar-201301:28x86
Smss.exe6.0.6002.2310364,51202-May-201301:27x86

Windows 7 and Windows Server 2008 R2 file information
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.1.7601.18xxxWindows 7 and Windows Server 2008 R2SP1GDR
    6.1.7601.22xxxWindows 7 and Windows Server 2008 R2SP1LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 7

File nameFile versionFile sizeDateTimePlatform
Appid-ppdlic.xrm-msNot Applicable3,01306-May-201305:27Not Applicable
Appid.sys6.1.7601.2231850,17606-May-201303:31x86
Appidapi.dll6.1.7601.2231850,68806-May-201305:01x86
Appidcertstorecheck.exe6.1.7601.2231816,89606-May-201303:30x86
Appidpolicyconverter.exe6.1.7601.2231897,79206-May-201303:31x86
Appidsvc.dll6.1.7601.2231829,69606-May-201303:30x86
Csrsrv.dll6.1.7601.1811338,91219-Mar-201304:48x86
Csrsrv.dll6.1.7601.2231838,91206-May-201305:02x86
Ntkrnlpa.exe6.1.7601.181473,968,87206-May-201305:06Not Applicable
Ntoskrnl.exe6.1.7601.181473,913,57606-May-201305:06Not Applicable
Ntkrnlpa.exe6.1.7601.223183,972,96806-May-201305:10Not Applicable
Ntoskrnl.exe6.1.7601.223183,917,16006-May-201305:10Not Applicable
Apisetschema.dll6.1.7600.163856,65614-Jul-200901:03x86
Smss.exe6.1.7601.1811369,63219-Mar-201302:49x86
Apisetschema.dll6.1.7601.223186,65606-May-201305:01x86
Smss.exe6.1.7601.2231869,63206-May-201303:02x86
Apisetschema.dll6.1.7600.1638512,64802-Apr-201003:07x86
Smss.exe6.1.7601.1811369,63219-Mar-201302:49x86
Apisetschema.dll6.1.7601.223186,65606-May-201305:01x86
Smss.exe6.1.7601.2231869,63206-May-201303:02x86

Windows 8 and Windows Server 2012 file information
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.2.920 0.16 xxxWindows 8 and Windows Server 2012RTMGDR
    6.2.920 0.20 xxxWindows 8 and Windows Server 2012RTMLDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8

File nameFile versionFile sizeDateTimePlatform
Ntoskrnl.exe6.2.9200.166045,575,42404-May-201305:45Not Applicable
Ntoskrnl.exe6.2.9200.207085,566,72004-May-201305:33Not Applicable



↑ Back to the top


Keywords: kbsurveynew, kbsecvulnerability, kbsecurity, kbsecreview, kbsecbulletin, kbbug, kblangall, kbfix, kbexpertiseinter, atdownload, kb, kbmustloc

↑ Back to the top

Article Info
Article ID : 2839229
Revision : 1
Created on : 1/7/2017
Published on : 6/15/2013
Exists online : False
Views : 225