MS13-056: Vulnerability in Microsoft DirectShow could allow remote code execution: July 9, 2013

View products that this article applies to.

INTRODUCTION

Microsoft has released security bulletin MS13-056. To view the complete security bulletin, visit one of the following Microsoft websites:

Home users:
http://www.microsoft.com/security/pc-security/updates.aspx
Skip the details: Download the updates for your home computer or laptop from the Microsoft Update website now:
http://update.microsoft.com/microsoftupdate/
IT professionals:
http://technet.microsoft.com/security/bulletin/MS13-056

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

↑ Back to the top

More Information

Windows Server 2008 is not affected by this issue unless the optional Desktop Experience component is also installed.

↑ Back to the top

FILE INFORMATION

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Windows XP and Windows Server 2003 file information

The files that apply to a specific milestone (SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
In addition to the files that are listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x86-based versions of Windows XP

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Spuninst.exe	6.3.13.0	231,288	05-Jul-2010	13:15	x86	None	Not Applicable
Qedit.dll	6.5.2600.6404	562,688	04-Jun-2013	07:23	x86	SP3	SP3QFE

For all supported x64-based versions of Windows Server 2003 and of Windows XP Professional x64 edition

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Spuninst.exe	6.3.4.1	293,168	04-Jun-2013	20:11	x64	None	Not Applicable
Qedit.dll	6.5.3790.5174	848,896	04-Jun-2013	20:10	x64	SP2	SP2QFE
Wqedit.dll	6.5.3790.5174	512,512	04-Jun-2013	20:10	x86	SP2	SP2QFE\WOW

For all supported x86-based versions of Windows Server 2003

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Spuninst.exe	6.3.4.1	221,488	07-Jul-2010	15:19	x86	None	Not Applicable
Qedit.dll	6.5.3790.5174	512,512	04-Jun-2013	07:33	x86	SP2	SP2QFE

For all supported IA-64-based versions of Windows Server 2003

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Spuninst.exe	6.3.4.1	501,552	04-Jun-2013	20:11	IA-64	None	Not Applicable
Qedit.dll	6.5.3790.5174	1,590,784	04-Jun-2013	20:10	IA-64	SP2	SP2QFE
Wqedit.dll	6.5.3790.5174	512,512	04-Jun-2013	20:10	x86	SP2	SP2QFE\WOW

↑ Back to the top

Windows Vista and Windows Server 2008 file information

The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
Version Product Milestone Service branch
6.0.6002.18xxx Windows Vista SP2 and Windows Server 2008 SP2 SP2 GDR
6.0.6002.23xxx Windows Vista SP2 and Windows Server 2008 SP2 SP2 LDR
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows Vista and Windows Server 2008

File name	File version	File size	Date	Time	Platform
Qedit.dll	6.6.6002.18860	505,344	01-Jun-2013	04:06	x86
Qedit.dll	6.6.6002.23132	505,344	04-Jun-2013	02:49	x86

For all supported x64-based versions of Windows Vista and Windows Server 2008

File name	File version	File size	Date	Time	Platform
Qedit.dll	6.6.6002.18860	619,008	01-Jun-2013	04:19	x64
Qedit.dll	6.6.6002.23132	619,008	04-Jun-2013	03:39	x64
Qedit.dll	6.6.6002.18860	505,344	01-Jun-2013	04:06	x86
Qedit.dll	6.6.6002.23132	505,344	04-Jun-2013	02:49	x86

↑ Back to the top

Windows 7 and Windows Server 2008 R2 file information

The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
Version Product Milestone Service branch
6.1.7601.18xxx Windows 7 and Windows Server 2008 R2 SP1 GDR
6.1.7601.22xxx Windows 7 and Windows Server 2008 R2 SP1 LDR
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 7

File name	File version	File size	Date	Time	Platform
Qedit.dll	6.6.7601.18175	509,440	04-Jun-2013	04:53	x86
Qedit.dll	6.6.7601.22348	509,440	04-Jun-2013	05:00	x86

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File name	File version	File size	Date	Time	Platform
Qedit.dll	6.6.7601.18175	624,128	04-Jun-2013	06:00	x64
Qedit.dll	6.6.7601.22348	624,128	04-Jun-2013	05:22	x64
Qedit.dll	6.6.7601.18175	509,440	04-Jun-2013	04:53	x86
Qedit.dll	6.6.7601.22348	509,440	04-Jun-2013	05:00	x86

↑ Back to the top

Windows 8 and Windows Server 2012 file information

The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

Version Product Milestone Service branch
6.2.920 0.16 xxx Windows 8 and Windows Server 2012 RTM GDR
6.2.920 0.20 xxx Windows 8 and Windows Server 2012 RTM LDR
GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

Version	Product	Milestone	Service branch
6.2.920 0.16 xxx	Windows 8 and Windows Server 2012	RTM	GDR
6.2.920 0.20 xxx	Windows 8 and Windows Server 2012	RTM	LDR

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8

File name	File version	File size	Date	Time	Platform
Qedit.dll	6.6.9200.16628	496,640	01-Jun-2013	09:25	x86
Qedit.dll	6.6.9200.20733	496,640	01-Jun-2013	09:31	x86

For all supported x64-based versions of Windows 8 and Windows Server 2012

File name	File version	File size	Date	Time	Platform
Qedit.dll	6.6.9200.16628	595,968	01-Jun-2013	09:21	x64
Qedit.dll	6.6.9200.20733	595,968	01-Jun-2013	09:20	x64
Qedit.dll	6.6.9200.16628	496,640	01-Jun-2013	09:25	x86
Qedit.dll	6.6.9200.20733	496,640	01-Jun-2013	09:31	x86

↑ Back to the top

File hash information

File name	SHA1 hash	SHA256 hash
Windows6.0-KB2845187-x64.msu	AD6569973A66B8968527004CD18C4DB1CDD8E2DE	AF5EDBCDC67EFAA1D098451C01F1939A52B9E1D479FB266C174C93A36AE5A90A
Windows6.0-KB2845187-x86.msu	045CD6985F67A1DD786D74A8886C95ADE6589283	5C06FE8E45D9317A685ED7F437F526D08D09F1B662196197F836F361E0ECE9FE
Windows6.1-KB2845187-x64.msu	08273B189A91BCD0E6122FA7EC1315000C2C03C5	605B38F3D78099FFCE25BD50446456CFCC50F1AC190F4617342B6F28831BB3FB
Windows6.1-KB2845187-x86.msu	828BAC72F7A1DBF008D1D262ED47216BF5EAD903	8136A24EE08171AA6680C06362D2453EC53A75330AC619EDB73C9735D08D3875
Windows8-RT-KB2845187-x64.msu	774E9D3FDEE42A46A8A0D52D9296CC4ECBBCAC5D	99DAE301F393D7F7624962CF2A1CB3B9AF175EB3BF275290B8D5D41E329AB477
Windows8-RT-KB2845187-x86.msu	EBF41F22C3F68B71D73A96CDBC77119D5B65BB6D	98CCCE4F2919CA1F7199CE657175E8618A52B662BF0163D5137AAB2E052973EC
WindowsServer2003-KB2845187-ia64-DEU.exe	AF1294FA621E95E236CA9C1B94B7B712A39F7CEE	A8AA6850FEBEEA5983A1141D829846B35B29DDA1981A8BA12B352A65B0E024DF
WindowsServer2003-KB2845187-ia64-ENU.exe	630C1057D689BEF9F12D717EAA2C9E95ADC3A5F0	7BC41A715C9AACB4FD4B75B2CB25D1F10282D2669FDCBFFC59ABF331617F42D8
WindowsServer2003-KB2845187-ia64-FRA.exe	BC373E528BCF9E22918E9A02F3A956DE323D0AF5	0D8362B7B7357826D40F5892F888ABD912385FB6C7E51F749C3B119CEA0A8861
WindowsServer2003-KB2845187-ia64-JPN.exe	B355D4FB8F7DDEDCC0BCFA71E618411173497967	15CC55CE035F7E81E00518AC0E4893FE92926A9356AE37931E0084C2B90E9797
WindowsServer2003-KB2845187-x86-CHS.exe	08EF68C7D088122F8CB9BAA54CA66703B44A3911	30158DC10F830A152F0963986AA232F5082C9CB559C71D939DB8AC88EB738BBD
WindowsServer2003-KB2845187-x86-CHT.exe	6402C8C6F1CB3A56320E1A6E319B8D8549CB0956	73B3A4F3B5199A6EB77C2FC358EEDB5E657035588265C86F614865C582AE8B60
WindowsServer2003-KB2845187-x86-CSY.exe	62847468D7C5ED9B08F1B353623562CA74BE619D	CE8E6E4D4A8C6792178D0D1F93AB6777E6648D3AA4A9CFD86B053B4A6F090D66
WindowsServer2003-KB2845187-x86-DEU.exe	A2D19D0BFDB236A0571422DB0C8936F8718529CA	2C3CB7F5398E45A79CD5557B5D9C591AF4ADBC9008AE0A1344346C8B46B6C058
WindowsServer2003-KB2845187-x86-ENU.exe	E89450833D07D0FF56D9B4CD5795CBAFA998E53E	7F87273ABAC3B32ACEB02E2221A2750D9B0BB52913890FFD53B2501373A270E0
WindowsServer2003-KB2845187-x86-ESN.exe	C1347D46CBBF252B913295F3F3D2F266F04E01F9	83EB1426C1E76CCD664597E6CBA0DCBE870C4170C9E78E785C28A0210CC9CEE8
WindowsServer2003-KB2845187-x86-FRA.exe	11E5C5116D8E2A247D17620F5C09D739D5D1258A	BB6436E1AEAB87EF6C878472A5B3151DBAD5C6C9B285CA09CD27DC5D9D3A4E0D
WindowsServer2003-KB2845187-x86-HUN.exe	D7892404F3D3B6AC4BA4287C78CFCA2FFD2D92D6	5466D42FD58531B3219994209343964EDCF107BF7E6FD99E93D2764BF5645808
WindowsServer2003-KB2845187-x86-ITA.exe	4E7703E43B39251103D51751BA93EF8E70EDD55C	08D1BFF6A5AD97393D4099AF48138BFB844150C7FAA3E030C5980611682FEFCC
WindowsServer2003-KB2845187-x86-JPN.exe	9FE4840ABB65F851D6717E0ABA9DFEE656F67572	24CCDCF286CC2CEE3FC02C53B5A9ADC06B4C2489E38B917CCC201EED6B169689
WindowsServer2003-KB2845187-x86-KOR.exe	6B2C217833BF11952BC75CB73CF7BC102D6B3E79	AF5DABA5C1096B5149D64A8B873421BF70705594DBA285FD4D3236919FE98C11
WindowsServer2003-KB2845187-x86-NLD.exe	E928830DA49B0DBA586EEE3C2E275F58DF91B191	9E8D84682AD6FCA39314638ED0EC7F30049C9D98DA81A8A9AC2F91D6F74D73B8
WindowsServer2003-KB2845187-x86-PLK.exe	7A9062A80A57B8B439C0C8AEA290473DAF1393BB	D3FEADACC85DA5DCD29383E7AD2E608D5FC4C8BD2E77A6D12F8E5A71EE3EA6F8
WindowsServer2003-KB2845187-x86-PTB.exe	10F3E217EA0991BD31B13D198B47DA58C1857394	E351295AFB9BC485057F8EFE050FDB4126C4B289E60BA0CCA5C0CB6BDE3B26D9
WindowsServer2003-KB2845187-x86-PTG.exe	20FFA0A3AFD7DD21B114620CCBEED6E1C9561A7C	95771781752E7C181843854295D5B1BFC9A2CF109CF2E2DAE61D08AD5AF1D37D
WindowsServer2003-KB2845187-x86-RUS.exe	DF91EA3A76D118F862A438F1B3EA31C87D555083	0DF2F5DFEC7CA03DB64DC294A3C8C3DF900D3F140BF992E6CFE23CF2C7C0E589
WindowsServer2003-KB2845187-x86-SVE.exe	23DE448D9198843C9D56B7603933F85D5F3C9638	9D5A767CC8A310191BFE230A42F160EA9C520FB1284EEF7F9F58013BEAB671AE
WindowsServer2003-KB2845187-x86-TRK.exe	DCCE1A4401545A9A1EB911C4C6D387A660565402	45C5BBD2DF568A5470FD916CB07D7E2D39581D6B6872D11737696E40E6413FDB
WindowsServer2003.WindowsXP-KB2845187-x64-CHS.exe	F51BCC17FFD05AD9938CCC48350CB96265B014F5	BEE3EAF048515C0BB323A539C09D1673BE5CC6D98A7E0F65F409AC28551C3759
WindowsServer2003.WindowsXP-KB2845187-x64-CHT.exe	10DA7F971005D6A6DCB27C0AF9276F049015BF1C	C392918A89361862F874C069D8D466FD1A83DC3A5D9237AADBF4401B1FA8BF18
WindowsServer2003.WindowsXP-KB2845187-x64-DEU.exe	4218C52110989C0F5760676EC48BF2BF8C481B81	70A7404A0E62D61947DC29249CB6DAC26DEFF7B7D1FBBB934436DF09B419D81C
WindowsServer2003.WindowsXP-KB2845187-x64-ENU.exe	0A29F918134EB077A626EB571C5D1F51F5D7FAC2	B66C313F0CE5C3E82C31B1DBF50E8A700E3BDE287C6C577BE44424D64F01DF1B
WindowsServer2003.WindowsXP-KB2845187-x64-ESN.exe	FCB5189BFE0CEC4E7C034685D6CA1981BBBFD746	45A4566CE6CCEBDBB4ACAB871F821C697659ABCD9F4ED94220B8CABC99F7D2EE
WindowsServer2003.WindowsXP-KB2845187-x64-FRA.exe	14046A38EF5644FF3554354026807880A92A1FE3	913870871A53691B2FC8EB8CE0E348A2918044384B548B86D9222649C08E522C
WindowsServer2003.WindowsXP-KB2845187-x64-ITA.exe	3E5485829F646187F3DB700BB9C00ABF9157F3EC	44315B5A6965F751F335F07BB5FD72BB0FCEF4511625943CCFDF76465E239204
WindowsServer2003.WindowsXP-KB2845187-x64-JPN.exe	B3D4B546FA67D5BDA66FEBC4FC4B224D6E2B59B5	2CDC631AD142C7CF60CC09865A2ECAA1CE394472143CC56990D3F3D05C257D20
WindowsServer2003.WindowsXP-KB2845187-x64-KOR.exe	A6434401CCEF83828FDC0C3F86934137A88B2FDB	1D26BB7B855D296226FEA5DB75A30D4EC406EA7BAEB7A55F3E7C412DE84574D0
WindowsServer2003.WindowsXP-KB2845187-x64-PTB.exe	089FDBD9430DDEB8BB51725B5AFE39E186CF744B	6D0EC4B59F18696E88798040D1E6C2D0AE0AA0646088B25CD107C72EE4025A9C
WindowsServer2003.WindowsXP-KB2845187-x64-RUS.exe	8EE429230F4F499C01FC8A7E85CCD79E9030F5C8	714B197952B9750A76F7E755985E73885B50EB5DBE178D025FA2249388BC7F01
WindowsXP-KB2845187-x86-ARA.exe	F0650A98756C3D65911B6D89A705154D050317C1	04A69B4DC15EF3D03B9435CB30E74C3E56E1B476CDD8235A57F58D7E24B3BFEE
WindowsXP-KB2845187-x86-CHS.exe	C1A099FCCAA3A312BB23BBEDA412943F0535CB5B	931D11BABF7DC5CD0E4FAB071FA4B002BE4CEE86A2924EF35580C37D39787B91
WindowsXP-KB2845187-x86-CHT.exe	30794C15CB41404B0C6BC3EA86779F820A1AC01C	500A84651040F591B523D7D1CA913A663D1AB13EC81DC31D556844055E431C6F
WindowsXP-KB2845187-x86-CSY.exe	971C3DE5715D7032D956812A6284A474EE5945D4	7B6E5D5D741E62F2708C84B8F1570C3587207FAEF1B55F32214838D77DD182ED
WindowsXP-KB2845187-x86-DAN.exe	3E4965EE71E92E5A4853B59E137580684F0F8F20	A5B5EA1BDD499F8236D9F2F5CA17914BBD4681F10A93503367C2033FBBED43CA
WindowsXP-KB2845187-x86-DEU.exe	F27BF2523D4181652D8875FEEEB46406D626EF9C	EFDD2CE66AB62AB94CBA19F2A8D2BBB4C42E6726F72944ACB1B249546A708C00
WindowsXP-KB2845187-x86-ELL.exe	7FB11FEC49727631AEB05AEBEA315679E3E653D2	79330CA82F6C32910A9EC26452DCF79CE56BA050AB964005209AFE08176BC330
WindowsXP-KB2845187-x86-ENU.exe	C9F21FC34C97D9E28AE28E388FA823C18B565AA7	1DBD67E738CF86F128275F307FADB904BFF1E594D1B627C2C068ED985F7EF2ED
WindowsXP-KB2845187-x86-ESN.exe	EB41213EAC07BDE2CC5BF0C6995ED0A6B39ACB1F	4C8045AEF445EF88C5559ED4E9721C1F82DF65C25A84EB2F3C475A1639D2F317
WindowsXP-KB2845187-x86-FIN.exe	5A57CF81C0EDFCA3FC9CEE18F882542E1DFB7A4E	43A183A68A4455AB5545EA3C2BA3A609B1AECA5134EE832A89C20688AA886354
WindowsXP-KB2845187-x86-FRA.exe	F8DDA0CE20072686058F7CECE72904F126983945	AB9375AC47BC88D8C56141C3A5AFCCA688ED181883D7F9B1C81CBFC70DD71E08
WindowsXP-KB2845187-x86-HEB.exe	8395A17490446C1C06A417F6E90138A4FE79CD7C	6250351C41543718BC3D5456054CEB347363C94445CCB27D3556DD07E6A076C4
WindowsXP-KB2845187-x86-HUN.exe	A5785BE71E3D928318B63BC5A06AAF7E544B45AC	34EDAA00EF2EC8C1F0AF9C4A7B761C97766AFC0E1DA3F9A64F8857246F486C0E
WindowsXP-KB2845187-x86-ITA.exe	E09FF09981302A9C2DE204CF101460FB0900BFAA	EB2A6CBE87A5989C3AA84AF37B4B7C34654DD53CA25D64A88DB6D3FA41E1EB4C
WindowsXP-KB2845187-x86-JPN.exe	F3C7FFEDADD931511AF125D7E86E21646A3BDEEE	94ED9A6E1BD1E1C1550514AC3AE2BB575D81A3AADC3F257D8B660563AF4A706A
WindowsXP-KB2845187-x86-KOR.exe	E0DB8BC20678AB2FC83899C35CDD8CF2CCCE2FD2	640920744D1BCAA6ABDC5C78A5600E5E0CAEEC54CD3F6145A92C84DBC2821578
WindowsXP-KB2845187-x86-NLD.exe	7EDE3443B3821C331160D2B9F75F759FC8B25334	B3D861B75A2C9F77DBC4287AE3CE2972C7F22669D2311ABC7B8F050466E35EA8
WindowsXP-KB2845187-x86-NOR.exe	B2F30F260BEF2CA5FB7595F387E5C7190A48C919	134AEE24A0B6AC6A2E769A807BB101749A6241B872CACEBAA9D86A49ABBADA7E
WindowsXP-KB2845187-x86-PLK.exe	BA9158429ACFD7395A8EA99DF6C21C4C7A60DD44	1194AB65B41601F343525228BC0BECA85E8E37A9C71E7AC1363E030A9A7ABD44
WindowsXP-KB2845187-x86-PTB.exe	B7A15C973BCDCE687362F43B408B8B1102205F5D	0188892ECC025DA26C7D96F2393B8BA79B31FFE173BBABDD215371E4B59EB4C8
WindowsXP-KB2845187-x86-PTG.exe	43A081C2BC7A8CC2D945316AF6413919324E4C09	3E184127EF2A5248C2207843BD23195CDBFFDD44635BE9967D285D4911B07B3A
WindowsXP-KB2845187-x86-RUS.exe	538907EF606AC8B98F7CF02EBC64B07217012412	D118FDE87CDA76A2CB457B1143D6F2FA3261BE593420EBA5866A904BBBFD1224
WindowsXP-KB2845187-x86-SVE.exe	53E8444B0D9CE5D2C59FB0533192B52CD53D5B15	55F42ACA6658142840CCAAF1EB5C57309AB2081C11F9667C8595384DA52910D9
WindowsXP-KB2845187-x86-TRK.exe	EE1FDFD217EF3A5CA9A109F08E650846AA955192	094E3113FA0604857010FD11ADCCD8989CA3B221E22E020145FFDE80286D8539

↑ Back to the top

Applies to:

↑ Back to the top

Keywords: kb, atdownload, kbbug, kbexpertiseinter, kbfix, kblangall, kbmustloc, kbsecbulletin, kbsecreview, kbsecurity, kbsecvulnerability, kbsurveynew

↑ Back to the top

Article Info

Article ID	:	2845187
Revision	:	1
Created on	:	1/7/2017
Published on	:	10/4/2013
Exists online	:	False
Views	:	272

Microsoft KB Archive Search

MS13-056: Vulnerability in Microsoft DirectShow could allow remote code execution: July 9, 2013

INTRODUCTION

How to obtain help and support for this security update

More Information

FILE INFORMATION

For all supported x86-based versions of Windows XP

For all supported x64-based versions of Windows Server 2003 and of Windows XP Professional x64 edition

For all supported x86-based versions of Windows Server 2003

For all supported IA-64-based versions of Windows Server 2003

For all supported x86-based versions of Windows Vista and Windows Server 2008

For all supported x64-based versions of Windows Vista and Windows Server 2008

For all supported x86-based versions of Windows 7

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

For all supported x86-based versions of Windows 8

For all supported x64-based versions of Windows 8 and Windows Server 2012

Applies to: