Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

MS14-076: Vulnerability in Internet Information Services (IIS) could allow security feature bypass: November 11, 2014


View products that this article applies to.

INTRODUCTION

Microsoft has released security bulletin MS14-076. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your Windows-based computer Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

↑ Back to the top


More Information

Security Update Deployment

Windows 8 (all editions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor all supported 32-bit editions of Windows 8:
Windows8-RT-KB2982998-v2-x86.msu

For all supported x64-based editions of Windows 8:
Windows8-RT-KB2982998-v2-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementThis update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.
Removal informationTo uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.

Windows 8.1 (all editions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor all supported 32-bit editions of Windows 8.1:
Windows8.1-KB2982998-v2-x86.msu

For all supported x64-based editions of Windows 8.1:
Windows8.1-KB2982998-v2-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementThis update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.
Removal informationTo uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.

Windows Server 2012 and Windows Server 2012 R2 (all editions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor all supported editions of Windows Server 2012:
Windows8-RT-KB2982998-v2-x64.msu

For all supported editions of Windows Server 2012 R2:
Windows8.1-KB2982998-v2-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementThis update does not require a restart. The installer stops the required services, applies the update, and then restarts the services. However, if the required services cannot be stopped for any reason, or if the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.
Removal informationTo uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.

↑ Back to the top


FILE INFORMATION

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.


Windows 8 and Windows Server 2012 file information
  • The files that apply to a specific product, milestone (RTM,SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.2.920 0.16 xxxWindows 8 and Windows Server 2012RTMGDR
    6.2.920 0.20 xxxWindows 8 and Windows Server 2012RTMLDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8

File nameFile versionFile sizeDateTimePlatform
Diprestr.dll8.0.9200.1638428,67226-Jul-201203:18x86
Iprestr.dll8.0.9200.1710123,04003-Sep-201402:48x86
Diprestr.dll8.0.9200.1638428,67226-Jul-201203:18x86
Iprestr.dll8.0.9200.2121823,04003-Sep-201402:34x86

For all supported x64-based versions of Windows 8 and Windows Server 2012

File nameFile versionFile sizeDateTimePlatform
Diprestr.dll8.0.9200.1638436,35226-Jul-201203:05x64
Iprestr.dll8.0.9200.1710128,16003-Sep-201402:21x64
Diprestr.dll8.0.9200.1638436,35226-Jul-201203:05x64
Iprestr.dll8.0.9200.2121828,16003-Sep-201402:37x64
Diprestr.dll8.0.9200.1638428,67226-Jul-201203:18x86
Iprestr.dll8.0.9200.1710123,04003-Sep-201402:48x86
Diprestr.dll8.0.9200.1638428,67226-Jul-201203:18x86
Iprestr.dll8.0.9200.2121823,04003-Sep-201402:34x86

Windows 8.1 and Windows Server 2012 R2 file information

For all supported x86-based versions of Windows 8.1

File nameFile versionFile sizeDateTimePlatform
Diprestr.dll8.5.9600.1638429,69622-Aug-201303:58x86
Iprestr.dll8.5.9600.1726524,06430-Aug-201403:52x86

For all supported x64-based versions of Windows 8.1 and Windows Server 2012 R2

File nameFile versionFile sizeDateTimePlatform
Diprestr.dll8.5.9600.1638436,35222-Aug-201311:25x64
Iprestr.dll8.5.9600.1726528,16030-Aug-201404:07x64
Diprestr.dll8.5.9600.1638429,69622-Aug-201303:58x86
Iprestr.dll8.5.9600.1726524,06430-Aug-201403:52x86

File hash information
Package NamePackage Hash SHA1Package Hash SHA2
Windows8.1-KB2982998-v2-x64.msu976DC51F6A2E3E60770E3202BDC7B2BB038434A7A69A659934601A78A1059E2BCF3D574A2EDA1EFB14BA966802FECF10C4FEDED6
Windows8.1-KB2982998-v2-x86.msu59BC0AA96697414CA55BCD040044860B3A6D8FB98AB2B14B303037AB8D052202D8D4F9F42C1C3157E7F326431819F74C9A7FD935
Windows8-RT-KB2982998-v2-x64.msu7B7E23814501F3C8974013E7CA2B904301170BF65BD1AF701A768766B851EF294E0900A392680654791280E02B72B3DFEE967D0C
Windows8-RT-KB2982998-v2-x86.msu5038214A7E2A4B52CC9D3E6ABD501CE5D79070FF5C38BAD664240B3707CD2F182BCD6C7749737249E3619499F2E2E514B6C1D76E

↑ Back to the top


Keywords: kbsurveynew, kbsecvulnerability, kbsecurity, kbsecreview, kbsecbulletin, kbbug, kblangall, kbfix, kbexpertiseinter, atdownload, kb, kbmustloc

↑ Back to the top

Article Info
Article ID : 2982998
Revision : 1
Created on : 1/7/2017
Published on : 11/12/2014
Exists online : False
Views : 769