Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. MS15-062: Vulnerability in Active Directory federation services could allow elevation of privilege: June 9, 2015

MS15-062: Vulnerability in Active Directory federation services could allow elevation of privilege: June 9, 2015

View products that this article applies to.

Summary

This security update resolves a vulnerability in Active Directory Federation Services (AD FS). The vulnerability could allow elevation of privilege if an attacker submits a specially crafted URL to a target site. Because of the vulnerability, in specific situations a specially crafted script is not sanitized correctly. This situation then could lead to an attacker-supplied script being run in the security context of a user who views the malicious content. For cross-site scripting attacks, this vulnerability requires that a user be visiting a compromised site for any malicious action to occur.

↑ Back to the top

Introduction

Microsoft has released security bulletin MS15-062. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

↑ Back to the top

More Information

Security update deployment information

Windows Server 2008 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file nameFor Active Directory Federation Services 2.0 on all supported 32-bit editions of Windows Server 2008:
Windows6.0-KB3062577-x86.msu

For Active Directory Federation Services 2.0 on all supported x64-based editions of Windows Server 2008:
Windows6.0-KB3062577-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementThis update does not require a system restart. However, the AD FS service (adfssrv) and IIS must be stopped before installing the update and restarted after the update is complete.
Removal informationTo uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, and then click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.
Prerequisites You must first install Active Directory Federation Services 2.0 RTW and enable the ADFS role. For more information, visit the following Microsoft webpage:
Active Directory Federation Services 2.0 RTW

Windows Server 2008 R2 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file nameFor Active Directory Federation Services 2.0 on all supported x64-based editions of Windows Server 2008 R2:
Windows6.1-KB3062577-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementThis update does not require a system restart. However, the AD FS service (adfssrv) and IIS must be stopped before installing the update and restarted after the update is complete.
Removal informationTo uninstall an update that is installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, and then click System and Security. Under Windows Update, click View installed updates, and then select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.
Prerequisites You must first install Active Directory Federation Services 2.0 RTW and enable the ADFS role. For more information, visit the following Microsoft webpage:
Active Directory Federation Services 2.0 RTW

Windows Server 2012 (all editions)

Reference Table

The following table contains the security update information for this software.
Security update file nameFor all supported editions of Windows Server 2012:
Windows8-RT-KB3062577-x64.msu
Installation switchesSee Microsoft Knowledge Base Article 934307
Restart requirementFor all supported editions of Windows Server 2012:
This update does not require a system restart. However, the AD FS service (adfssrv) and IIS must be stopped before installing the update and restarted after the update is complete.
Removal informationTo uninstall an update that installed by WUSA, use the /Uninstall setup switch. Or, click Control Panel, click System and Security, and then click Windows Update. Under See also, click Installed updates, and then and select from the list of updates.
File informationSee the file information section.
Registry key verificationNote A registry key does not exist to validate the presence of this update.

↑ Back to the top

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.


Windows Server 2008 file information
  • The files that apply to a specific product, milestone (SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.0.6002.18xxxWindows Server 2008 SP2SP2GDR
    6.0.6002.23xxxWindows Server 2008 SP2SP2LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

For all supported x86-based versions of Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Microsoft.identitymodel.dll6.1.7601.230491,093,63211-May-201513:14x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24807-May-201423:40x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640549,15207-May-201423:49x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640557,34426-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640557,34407-May-201423:41x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640565,53626-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640549,15226-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640549,15226-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640545,05626-May-201407:07x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640545,05626-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24807-May-201423:40x86
Microsoft.identityserver.resources.dll6.1.7601.2236549,15207-May-201423:49x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235357,34426-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235357,34407-May-201423:41x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235369,63226-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235349,15226-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235349,15226-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235345,05626-May-201407:07x86
Microsoft.identityserver.resources.dll6.1.7601.2235345,05626-May-201407:07x86
Microsoft.identityserver.service.dll6.1.7601.18622643,07208-Oct-201422:42x86
Microsoft.identityserver.service.mofNot Applicable4,60626-May-201012:23Not Applicable
Uninstallwmiprovider.mofNot Applicable1,01226-May-201012:23Not Applicable
Microsoft.identityserver.service.dll6.1.7601.23049671,74411-May-201513:14x86
Microsoft.identityserver.service.mofNot Applicable4,60607-May-201423:48Not Applicable
Uninstallwmiprovider.mofNot Applicable1,01207-May-201423:49Not Applicable
Microsoft.identityserver.dll6.1.7601.18847786,43211-May-201513:12x86
Microsoft.identityserver.dll6.1.7601.23049798,72011-May-201513:14x86
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953133,63226-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953147,45607-May-201423:40Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953129,53607-May-201423:49Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953154,11226-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953156,67226-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953145,40826-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953145,40826-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.2195378,84807-May-201423:41Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.2195377,82426-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953143,36026-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953143,87226-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953146,43226-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953150,01626-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953138,75226-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953135,16826-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953130,04826-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.2195356,83226-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.2195362,46426-May-201407:07Not Applicable
Microsoft.identityserver.nativeresources.dll6.1.7601.21953147,96807-May-201423:48x86

For all supported x64-based versions of Windows Server 2008

File nameFile versionFile sizeDateTimePlatform
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953133,63226-May-201407:02Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953147,45607-May-201423:40Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953129,53607-May-201423:47Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953154,11226-May-201407:02Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953156,67226-May-201407:02Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953145,40826-May-201407:02Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953145,40826-May-201407:03Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.2195378,84807-May-201423:41Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.2195377,82426-May-201407:03Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953143,36026-May-201407:03Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953143,87226-May-201407:03Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953146,43226-May-201407:03Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953150,01626-May-201407:03Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953138,75226-May-201407:03Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953135,16826-May-201407:03Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.21953130,04826-May-201407:03Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.2195356,83226-May-201407:03Not Applicable
Microsoft.identityserver.nativeresources.dll.mui6.1.7601.2195362,46426-May-201407:03Not Applicable
Microsoft.identityserver.nativeresources.dll6.1.7601.21953147,96807-May-201423:47x64
Microsoft.identitymodel.dll6.1.7601.230491,093,63211-May-201513:14x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:02x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24807-May-201423:40x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640549,15207-May-201423:47x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:02x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640557,34426-May-201407:02x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:02x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:03x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640557,34407-May-201423:41x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:03x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:03x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:03x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:03x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640553,24826-May-201407:03x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640565,53626-May-201407:03x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640549,15226-May-201407:03x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640549,15226-May-201407:03x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640545,05626-May-201407:03x86
Microsoft.identityserver.service.resources.dll6.1.7600.1640545,05626-May-201407:03x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:02x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24807-May-201423:40x86
Microsoft.identityserver.resources.dll6.1.7601.2236549,15207-May-201423:47x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:02x86
Microsoft.identityserver.resources.dll6.1.7601.2235357,34426-May-201407:02x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:02x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:03x86
Microsoft.identityserver.resources.dll6.1.7601.2235357,34407-May-201423:41x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:03x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:03x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:03x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:03x86
Microsoft.identityserver.resources.dll6.1.7601.2235353,24826-May-201407:03x86
Microsoft.identityserver.resources.dll6.1.7601.2235369,63226-May-201407:03x86
Microsoft.identityserver.resources.dll6.1.7601.2235349,15226-May-201407:03x86
Microsoft.identityserver.resources.dll6.1.7601.2235349,15226-May-201407:03x86
Microsoft.identityserver.resources.dll6.1.7601.2235345,05626-May-201407:03x86
Microsoft.identityserver.resources.dll6.1.7601.2235345,05626-May-201407:03x86
Microsoft.identityserver.service.dll6.1.7601.18620643,07208-Oct-201422:42x86
Microsoft.identityserver.service.mofNot Applicable4,60626-May-201012:23Not Applicable
Uninstallwmiprovider.mofNot Applicable1,01226-May-201012:23Not Applicable
Microsoft.identityserver.service.dll6.1.7601.23049671,74411-May-201513:14x86
Microsoft.identityserver.service.mofNot Applicable4,60607-May-201423:47Not Applicable
Uninstallwmiprovider.mofNot Applicable1,01207-May-201423:47Not Applicable
Microsoft.identityserver.dll6.1.7601.18847786,43211-May-201513:12x86
Microsoft.identityserver.dll6.1.7601.23049798,72011-May-201513:14x86
Windows Server 2008 R2 file information
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.1.7601.18xxxWindows Server 2008 R2SP1GDR
    6.1.7601.22xxxWindows Server 2008 R2SP1LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.


For all supported x64-based versions of Windows Server 2008 R2
Windows Server 2012 file information
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.2.920 0.16 xxxWindows Server 2012RTMGDR
    6.2.920 0.20 xxxWindows Server 2012RTMLDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.


For all supported x64-based versions of Windows Server 2012

File nameFile versionFile sizeDateTimePlatform
Microsoft.identityserver.resources.dll6.2.9200.2075242,49619-Jun-201312:49x86
Microsoft.identityserver.resources.dll6.2.9200.2075244,03219-Jun-201309:08x86
Microsoft.identityserver.resources.dll6.2.9200.2075239,42419-Jun-201309:08x86
Microsoft.identityserver.resources.dll6.2.9200.2075243,52019-Jun-201309:07x86
Microsoft.identityserver.resources.dll6.2.9200.2075246,59219-Jun-201309:07x86
Microsoft.identityserver.resources.dll6.2.9200.2075244,54419-Jun-201312:15x86
Microsoft.identityserver.resources.dll6.2.9200.2075243,00819-Jun-201312:35x86
Microsoft.identityserver.resources.dll6.2.9200.2075248,64019-Jun-201309:08x86
Microsoft.identityserver.resources.dll6.2.9200.2075244,54419-Jun-201312:10x86
Microsoft.identityserver.resources.dll6.2.9200.2075241,98419-Jun-201312:11x86
Microsoft.identityserver.resources.dll6.2.9200.2075243,52019-Jun-201312:41x86
Microsoft.identityserver.resources.dll6.2.9200.2075243,00819-Jun-201311:58x86
Microsoft.identityserver.resources.dll6.2.9200.2075243,00819-Jun-201311:51x86
Microsoft.identityserver.resources.dll6.2.9200.2075259,90419-Jun-201311:57x86
Microsoft.identityserver.resources.dll6.2.9200.2075241,47219-Jun-201310:36x86
Microsoft.identityserver.resources.dll6.2.9200.2075240,96019-Jun-201310:41x86
Microsoft.identityserver.resources.dll6.2.9200.2075236,35219-Jun-201312:08x86
Microsoft.identityserver.resources.dll6.2.9200.2075236,86419-Jun-201312:42x86
Microsoft.identityserver.resources.dll6.2.9200.2075236,35219-Jun-201312:10x86
Microsoft.identityserver.service.dll6.2.9200.17135662,01604-Oct-201407:04x86
Microsoft.identityserver.service.dll6.2.9200.21252661,50404-Oct-201406:21x86
Microsoft.identityserver.dll6.2.9200.17366880,64009-May-201500:00x86
Microsoft.identityserver.dll6.2.9200.21478880,64008-May-201523:42x86
File hash information
Package NamePackage Hash SHA1Package Hash SHA2
Windows6.0-KB3062577-x64.msu01F1DD88B6D84A1DFD113C79C503BE8C505E0AD4A19C192BEABDDBD01FB6FF3CBAAA81B7541A2B7B28FDF6832B00191787C84181
Windows6.0-KB3062577-x64.msu01F1DD88B6D84A1DFD113C79C503BE8C505E0AD4A19C192BEABDDBD01FB6FF3CBAAA81B7541A2B7B28FDF6832B00191787C84181
Windows6.0-KB3062577-x86.msu9E1540DA7301FD60C31E1D71C65642792AD8DF9CF7446C675E61373C5EDE1EFD644E5C5537944B7ACEA946360C9CC5E444351324
Windows6.0-KB3062577-x86.msu9E1540DA7301FD60C31E1D71C65642792AD8DF9CF7446C675E61373C5EDE1EFD644E5C5537944B7ACEA946360C9CC5E444351324
Windows6.1-KB3062577-x64.msu286D03D65A2B2EF1B7C6119A41E36848F944D8B437843B2471DBAB90FAD49A7D30DFEBA43650AD965C2D9683A009CAAEC268CE29
Windows6.1-KB3062577-x64.msu286D03D65A2B2EF1B7C6119A41E36848F944D8B437843B2471DBAB90FAD49A7D30DFEBA43650AD965C2D9683A009CAAEC268CE29
Windows8-RT-KB3062577-x64.msuCFFBB478DBA7C8E871C404FB7AA03FDD51406B0E4E766CA662A6EEAD34C3591635715AC523C8ECE29A061B3802575ABABC5ABE60
Windows8-RT-KB3062577-x64.msuCFFBB478DBA7C8E871C404FB7AA03FDD51406B0E4E766CA662A6EEAD34C3591635715AC523C8ECE29A061B3802575ABABC5ABE60

↑ Back to the top

Keywords: kbsecreview, kbsurveynew, kbsecvulnerability, kbsecurity, kbsecbulletin, atdownload, kblangall, kbfix, kbexpertiseinter, kbbug, kb, kbmustloc

↑ Back to the top

Article Info
Article ID : 3062577
Revision : 1
Created on : 1/7/2017
Published on : 6/9/2015
Exists online : False
Views : 250