Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. MS15-044 and MS15-051: Description of the security update for Windows font drivers

MS15-044 and MS15-051: Description of the security update for Windows font drivers

View products that this article applies to.

Summary

This security update resolves vulnerabilities in Windows, the Microsoft .NET Framework, Microsoft Office, Microsoft Lync, and Microsoft Silverlight. The more severe of these vulnerabilities could allow for one of the following scenarios:
  • Remote code execution if a user opens a specially crafted document or goes to an untrusted webpage that contains embedded TrueType fonts.
  • Elevation of privilege if an attacker logs on locally and runs arbitrary code in kernel mode. An attacker could then take the following actions:
    • Install programs
    • View, change, or delete data
    • Create new accounts that have full user rights
    An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability. The vulnerability cannot be exploited remotely or by anonymous users.

↑ Back to the top

Introduction

Microsoft has released security bulletins MS15-044 and MS15-051. To learn more about the security bulletins:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

↑ Back to the top

More Information

Known issues with this security update

  • After you install this security update (3045171), you experience crashes when you use Windows GDI+ to create text outline-based path objects on a computer that's running Windows 7 or an earlier version of Windows.

    To resolve this problem, install update 3065979. For more information, click the following article number to go to the article in the Microsoft Knowledge Base:
    3065979 "GsDraw error (1): GenericError" error occurs and application crashes when you create text outline in Windows
  • After you install this security update on a computer that's running Windows Vista or Windows Server 2008, you may receive an error message that resembles the following for the FontCache service in the Services Microsoft Management Console (MMC):



    Failed to Read Description. Error Code: 15100


    When you open FontCache service in the Services MMC, you may receive an error message that resembles the following:


    Configuration Manager: A general error occurred

    The resource loader failed to find MUI file


    To resolve this problem, install update 971512. For more information, click the following article number to go to the article in the Microsoft Knowledge Base:
    971512 Description of the Windows Graphics, Imaging, and XPS Library

↑ Back to the top

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.


Windows Server 2003 file information
  • The files that apply to a specific milestone (SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. QFE service branches contain hotfixes in addition to widely released fixes.
  • In addition to the files that are listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

For all supported x64-based versions of Windows Server 2003

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Win32k.sys5.2.3790.56154,659,20017-Apr-201519:02x64SP2SP2QFE
Gdiplus.dll5.2.6002.236392,193,92017-Apr-201519:02x64SP2SP2QFE\ASMS\10\MSFT\WINDOWS\GDIPLUS
Gdiplus.manNot Applicable40017-Apr-201519:02Not ApplicableSP2SP2QFE\ASMS\10\MSFT\WINDOWS\GDIPLUS
Gdiplus.manNot Applicable61217-Apr-201519:02Not ApplicableSP2SP2QFE\ASMS\10\POLICY\MSFT\WINDOWS\GDIPLUS
Gdiplus.dll5.2.6002.236391,748,99217-Apr-201519:02x86SP2SP2QFE\ASMS\X86\10\MSFT\WINDOWS\GDIPLUS
Gdiplus.manNot Applicable39817-Apr-201519:02Not ApplicableSP2SP2QFE\ASMS\X86\10\MSFT\WINDOWS\GDIPLUS
Gdiplus.manNot Applicable60817-Apr-201519:02Not ApplicableSP2SP2QFE\ASMS\X86\10\POLICY\MSFT\WINDOWS\GDIPLUS

For all supported x86-based versions of Windows Server 2003

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Win32k.sys5.2.3790.56151,892,86417-Apr-201500:50x86SP2SP2QFE
Gdiplus.dll5.2.6002.236391,748,99217-Apr-201518:40x86SP2SP2QFE\ASMS\10\MSFT\WINDOWS\GDIPLUS
Gdiplus.manNot Applicable39817-Apr-201518:40Not ApplicableSP2SP2QFE\ASMS\10\MSFT\WINDOWS\GDIPLUS
Gdiplus.manNot Applicable60809-Apr-201519:12Not ApplicableSP2SP2QFE\ASMS\10\POLICY\MSFT\WINDOWS\GDIPLUS

For all supported IA-64-based versions of Windows Server 2003

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Win32k.sys5.2.3790.56155,684,73617-Apr-201518:57IA-64SP2SP2QFE
Gdiplus.dll5.2.6002.236394,912,64017-Apr-201518:57IA-64SP2SP2QFE\ASMS\10\MSFT\WINDOWS\GDIPLUS
Gdiplus.manNot Applicable39917-Apr-201518:57Not ApplicableSP2SP2QFE\ASMS\10\MSFT\WINDOWS\GDIPLUS
Gdiplus.manNot Applicable61017-Apr-201518:57Not ApplicableSP2SP2QFE\ASMS\10\POLICY\MSFT\WINDOWS\GDIPLUS
Gdiplus.dll5.2.6002.236391,748,99217-Apr-201518:57x86SP2SP2QFE\ASMS\X86\10\MSFT\WINDOWS\GDIPLUS
Gdiplus.manNot Applicable39817-Apr-201518:57Not ApplicableSP2SP2QFE\ASMS\X86\10\MSFT\WINDOWS\GDIPLUS
Gdiplus.manNot Applicable60817-Apr-201518:57Not ApplicableSP2SP2QFE\ASMS\X86\10\POLICY\MSFT\WINDOWS\GDIPLUS
Windows Vista and Windows Server 2008 file information
  • The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.0.6002.18xxxWindows Vista SP2 and Windows Server 2008 SP2SP2GDR
    6.0.6002.23xxxWindows Vista SP2 and Windows Server 2008 SP2SP2LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows Vista and Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
D2d1.dll7.0.6002.18923683,00827-Aug-201302:00x86
D2d1.dll7.0.6002.23680682,49619-Apr-201520:13x86
Fntcache.dll7.0.6002.19372801,79219-Apr-201504:59x86
Fntcache.dll7.0.6002.23680801,79219-Apr-201520:12x86
Dwrite.dll7.0.6002.193721,072,64019-Apr-201504:59x86
Dwrite.dll7.0.6002.236801,072,64019-Apr-201520:12x86
D3d10level9.dll7.0.6002.18923486,40027-Aug-201302:28x86
D3d10level9.dll7.0.6002.23680486,40019-Apr-201520:18x86
D3d10_1.dll7.0.6002.18923160,76827-Aug-201304:28x86
D3d10_1core.dll7.0.6002.18827219,64817-Apr-201312:30x86
D3d10_1.dll7.0.6002.23680160,76819-Apr-201521:24x86
D3d10_1core.dll7.0.6002.23680219,64819-Apr-201521:24x86
D3d10.dll7.0.6002.189231,029,12027-Aug-201304:28x86
D3d10core.dll7.0.6002.18827189,95217-Apr-201312:30x86
D3d10.dll7.0.6002.236801,029,12019-Apr-201521:24x86
D3d10core.dll7.0.6002.23680189,95219-Apr-201521:24x86
D3d10warp.dll7.0.6002.189231,172,48027-Aug-201302:29x86
D3d10warp.dll7.0.6002.236801,172,48019-Apr-201520:19x86
Win32k.sys6.0.6002.193722,065,40819-Apr-201504:59x86
Win32k.sys6.0.6002.236802,073,08819-Apr-201520:12x86
Gdiplus.dll5.2.6002.193721,748,99219-Apr-201506:31x86
Gdiplus.dll5.2.6002.236801,748,99219-Apr-201521:24x86
Gdiplus.dll6.0.6002.193721,839,10419-Apr-201506:31x86
Gdiplus.dll6.0.6002.236801,839,61619-Apr-201521:24x86

For all supported x64-based versions of Windows Vista and Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
D2d1.dll7.0.6002.18923834,04827-Aug-201302:13x64
D2d1.dll7.0.6002.23680834,04817-Apr-201523:35x64
Fntcache.dll7.0.6002.193721,154,04817-Apr-201523:30x64
Fntcache.dll7.0.6002.236801,154,04817-Apr-201523:33x64
Dwrite.dll7.0.6002.193721,561,08817-Apr-201523:30x64
Dwrite.dll7.0.6002.236801,561,08817-Apr-201523:33x64
D3d10level9.dll7.0.6002.18923566,27227-Aug-201302:43x64
D3d10level9.dll7.0.6002.23680566,27217-Apr-201523:44x64
D3d10_1.dll7.0.6002.18923196,09627-Aug-201304:33x64
D3d10_1core.dll7.0.6002.18827327,68017-Apr-201313:04x64
D3d10_1.dll7.0.6002.23680196,09618-Apr-201500:16x64
D3d10_1core.dll7.0.6002.23680327,68018-Apr-201500:16x64
D3d10.dll7.0.6002.189231,268,22427-Aug-201304:33x64
D3d10core.dll7.0.6002.18827287,23217-Apr-201313:04x64
D3d10.dll7.0.6002.236801,268,22418-Apr-201500:16x64
D3d10core.dll7.0.6002.23680287,23218-Apr-201500:16x64
D3d10warp.dll7.0.6002.189232,002,94427-Aug-201302:45x64
D3d10warp.dll7.0.6002.236802,002,94417-Apr-201523:45x64
Win32k.sys6.0.6002.193722,793,47217-Apr-201523:30x64
Win32k.sys6.0.6002.236802,796,03217-Apr-201523:34x64
Gdiplus.dll5.2.6002.193722,193,40818-Apr-201500:32x64
Gdiplus.dll5.2.6002.236802,193,92018-Apr-201500:16x64
Gdiplus.dll6.0.6002.193722,425,34418-Apr-201500:32x64
Gdiplus.dll6.0.6002.236802,425,34418-Apr-201500:16x64
D2d1.dll7.0.6002.18923683,00827-Aug-201302:00x86
D2d1.dll7.0.6002.23680682,49619-Apr-201520:13x86
Dwrite.dll7.0.6002.193721,072,64019-Apr-201504:59x86
Dwrite.dll7.0.6002.236801,072,64019-Apr-201520:12x86
D3d10level9.dll7.0.6002.18923486,40027-Aug-201302:28x86
D3d10level9.dll7.0.6002.23680486,40019-Apr-201520:18x86
D3d10_1.dll7.0.6002.18923160,76827-Aug-201304:28x86
D3d10_1core.dll7.0.6002.18827219,64817-Apr-201312:30x86
D3d10_1.dll7.0.6002.23680160,76819-Apr-201521:24x86
D3d10_1core.dll7.0.6002.23680219,64819-Apr-201521:24x86
D3d10.dll7.0.6002.189231,029,12027-Aug-201304:28x86
D3d10core.dll7.0.6002.18827189,95217-Apr-201312:30x86
D3d10.dll7.0.6002.236801,029,12019-Apr-201521:24x86
D3d10core.dll7.0.6002.23680189,95219-Apr-201521:24x86
D3d10warp.dll7.0.6002.189231,172,48027-Aug-201302:29x86
D3d10warp.dll7.0.6002.236801,172,48019-Apr-201520:19x86
Gdiplus.dll5.2.6002.193721,748,99219-Apr-201506:31x86
Gdiplus.dll5.2.6002.236801,748,99219-Apr-201521:24x86
Gdiplus.dll6.0.6002.193721,839,10419-Apr-201506:31x86
Gdiplus.dll6.0.6002.236801,839,61619-Apr-201521:24x86

For all supported IA-64-based versions of Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Win32k.sys6.0.6002.193726,715,39217-Apr-201523:21IA-64
Win32k.sys6.0.6002.236806,724,60817-Apr-201523:21IA-64
Gdiplus.dll5.2.6002.193724,911,61618-Apr-201500:14IA-64
Gdiplus.dll5.2.6002.236804,912,64017-Apr-201523:58IA-64
Gdiplus.dll6.0.6002.193725,267,45618-Apr-201500:14IA-64
Gdiplus.dll6.0.6002.236805,267,45617-Apr-201523:58IA-64
Gdiplus.dll5.2.6002.193721,748,99219-Apr-201506:31x86
Gdiplus.dll5.2.6002.236801,748,99219-Apr-201521:24x86
Gdiplus.dll6.0.6002.193721,839,10419-Apr-201506:31x86
Gdiplus.dll6.0.6002.236801,839,61619-Apr-201521:24x86
Windows 7 and Windows Server 2008 R2 file information
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.1.7601.18xxxWindows 7 and Windows Server 2008 R2SP1GDR
    6.1.7601.22xxxWindows 7 and Windows Server 2008 R2SP1LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 7

File nameFile versionFile sizeDateTimePlatform
Fntcache.dll6.1.7601.18834811,52020-Apr-201502:55x86
Fntcache.dll6.1.7601.23038811,52020-Apr-201502:59x86
Fntcache.dll6.2.9200.17292909,31220-Apr-201502:56x86
Fntcache.dll6.2.9200.21409909,31220-Apr-201502:59x86
Dwrite.dll6.1.7601.188341,081,34420-Apr-201502:55x86
Dwrite.dll6.1.7601.230381,081,34420-Apr-201502:59x86
Dwrite.dll6.2.9200.172921,250,81620-Apr-201502:56x86
Dwrite.dll6.2.9200.214091,250,81620-Apr-201502:59x86
Win32k.sys6.1.7601.188342,382,33620-Apr-201502:03x86
Win32k.sys6.1.7601.230382,391,04020-Apr-201502:02x86
Gdiplus.dll5.2.7601.188341,723,39220-Apr-201502:52x86
Gdiplus.dll5.2.7601.230381,723,39220-Apr-201502:54x86
Gdiplus.dll6.1.7601.188341,625,60020-Apr-201502:52x86
Gdiplus.dll6.1.7601.230381,626,62420-Apr-201502:54x86

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File nameFile versionFile sizeDateTimePlatform
Fntcache.dll6.1.7601.188341,147,90420-Apr-201503:16x64
Fntcache.dll6.1.7601.230381,147,90420-Apr-201503:11x64
Fntcache.dll6.2.9200.172921,179,13620-Apr-201503:17x64
Fntcache.dll6.2.9200.214091,179,13620-Apr-201503:11x64
Dwrite.dll6.1.7601.188341,550,33620-Apr-201503:16x64
Dwrite.dll6.1.7601.230381,550,33620-Apr-201503:11x64
Dwrite.dll6.2.9200.172921,647,10420-Apr-201503:17x64
Dwrite.dll6.2.9200.214091,647,10420-Apr-201503:11x64
Win32k.sys6.1.7601.188343,204,60820-Apr-201502:11x64
Win32k.sys6.1.7601.230383,208,70420-Apr-201502:07x64
Gdiplus.dll5.2.7601.188342,293,76020-Apr-201503:11x64
Gdiplus.dll5.2.7601.230382,293,76020-Apr-201503:06x64
Gdiplus.dll6.1.7601.188342,166,27220-Apr-201503:11x64
Gdiplus.dll6.1.7601.230382,167,29620-Apr-201503:06x64
Dwrite.dll6.1.7601.188341,081,34420-Apr-201502:55x86
Dwrite.dll6.1.7601.230381,081,34420-Apr-201502:59x86
Dwrite.dll6.2.9200.172921,250,81620-Apr-201502:56x86
Dwrite.dll6.2.9200.214091,250,81620-Apr-201502:59x86
Gdiplus.dll5.2.7601.188341,723,39220-Apr-201502:52x86
Gdiplus.dll5.2.7601.230381,723,39220-Apr-201502:54x86
Gdiplus.dll6.1.7601.188341,625,60020-Apr-201502:52x86
Gdiplus.dll6.1.7601.230381,626,62420-Apr-201502:54x86

For all supported IA-64-based versions of Windows Server 2008 R2

File nameFile versionFile sizeDateTimePlatform
Fntcache.dll6.1.7601.188342,312,19220-Apr-201502:15IA-64
Fntcache.dll6.1.7601.230382,312,19220-Apr-201502:17IA-64
Dwrite.dll6.1.7601.188343,025,92020-Apr-201502:15IA-64
Dwrite.dll6.1.7601.230383,026,43220-Apr-201502:17IA-64
Win32k.sys6.1.7601.188347,505,40820-Apr-201501:31IA-64
Win32k.sys6.1.7601.230387,512,06420-Apr-201501:32IA-64
Gdiplus.dll5.2.7601.188344,922,88020-Apr-201502:09IA-64
Gdiplus.dll5.2.7601.230384,922,88020-Apr-201502:13IA-64
Gdiplus.dll6.1.7601.188344,601,85620-Apr-201502:09IA-64
Gdiplus.dll6.1.7601.230384,603,39220-Apr-201502:13IA-64
Dwrite.dll6.1.7601.188341,081,34420-Apr-201502:55x86
Dwrite.dll6.1.7601.230381,081,34420-Apr-201502:59x86
Gdiplus.dll5.2.7601.188341,723,39220-Apr-201502:52x86
Gdiplus.dll5.2.7601.230381,723,39220-Apr-201502:54x86
Gdiplus.dll6.1.7601.188341,625,60020-Apr-201502:52x86
Gdiplus.dll6.1.7601.230381,626,62420-Apr-201502:54x86
Windows 8 and Windows Server 2012 file information
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.2.920 0.16 xxxWindows 8 and Windows Server 2012RTMGDR
    6.2.920 0.20 xxxWindows 8 and Windows Server 2012RTMLDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows 8

File nameFile versionFile sizeDateTimePlatform
Fntcache.dll6.2.9200.173431,010,17613-Apr-201504:05x86
Fntcache.dll6.2.9200.214561,012,22412-Apr-201522:34x86
Dwrite.dll6.2.9200.173431,416,19213-Apr-201504:05x86
Dwrite.dll6.2.9200.214561,421,31212-Apr-201522:34x86
Win32k.ptxmlNot Applicable4,17211-Oct-201200:38Not Applicable
Win32k.sys6.2.9200.173433,400,70413-Apr-201503:04x86
Win32k.ptxmlNot Applicable4,17225-Jul-201220:33Not Applicable
Win32k.sys6.2.9200.214573,391,48812-Apr-201522:23x86

For all supported x64-based versions of Windows 8 and Windows Server 2012

File nameFile versionFile sizeDateTimePlatform
Fntcache.dll6.2.9200.173431,280,51213-Apr-201505:30x64
Fntcache.dll6.2.9200.214421,277,95212-Apr-201522:30x64
Dwrite.dll6.2.9200.173431,839,61613-Apr-201505:30x64
Dwrite.dll6.2.9200.214421,837,56812-Apr-201522:30x64
Win32k.ptxmlNot Applicable4,17211-Oct-201200:37Not Applicable
Win32k.sys6.2.9200.173434,063,74413-Apr-201503:25x64
Win32k.ptxmlNot Applicable4,17225-Jul-201220:29Not Applicable
Win32k.sys6.2.9200.214574,062,20812-Apr-201522:21x64
Wow64_win32k.ptxmlNot Applicable4,17212-Feb-201300:14Not Applicable
Wow64_win32k.ptxmlNot Applicable4,17212-Feb-201300:09Not Applicable
Dwrite.dll6.2.9200.173431,416,19213-Apr-201504:05x86
Dwrite.dll6.2.9200.214561,421,31212-Apr-201522:34x86
Windows 8.1 and Windows Server 2012 R2 file information

For all supported x86-based versions of Windows 8.1

File nameFile versionFile sizeDateTimePlatform
Fntcache.dll6.3.9600.177951,088,51210-Apr-201500:23x86
Dwrite.dll6.3.9600.177951,560,57610-Apr-201500:26x86
Win32k.ptxmlNot Applicable4,21321-Aug-201323:39Not Applicable
Win32k.sys6.3.9600.177963,543,55213-Apr-201522:43x86

For all supported x64-based versions of Windows 8.1 and Windows Server 2012 R2

File nameFile versionFile sizeDateTimePlatform
Fntcache.dll6.3.9600.177951,387,00810-Apr-201500:50x64
Dwrite.dll6.3.9600.177951,996,80010-Apr-201501:00x64
Win32k.ptxmlNot Applicable4,21322-Aug-201306:44Not Applicable
Win32k.sys6.3.9600.177964,180,48013-Apr-201522:48x64
Wow64_win32k.ptxmlNot Applicable4,21321-Aug-201323:39Not Applicable
Dwrite.dll6.3.9600.177951,560,57610-Apr-201500:26x86

↑ Back to the top

Applies to:

↑ Back to the top

Keywords: kb, atdownload, kbbug, kbexpertiseinter, kbfix, kblangall, kbmustloc, kbsecbulletin, kbsecreview, kbsecurity, kbsecvulnerability, kbsurveynew

↑ Back to the top

Article Info
Article ID : 3045171
Revision : 1
Created on : 1/7/2017
Published on : 6/24/2015
Exists online : False
Views : 381