MS16-059: Security update to Windows Media Center: May 10, 2016

Summary

This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less affected than those who operate with administrative user rights.

To learn more about the vulnerability, see Microsoft Security Bulletin MS16-059.

More Information

Important

• If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see
Get security updates automatically.

__

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Click the download link in Microsoft Security Bulletin MS16-059 that corresponds to the version of Windows that you are running.

More Information

__

Security update deployment information

Windows Vista (all editions)
Reference table

The following table contains the security update information for this software.
Security update file names| For all supported 32-bit editions of Windows Vista:
Windows6.0-KB3150220-x86.msu
—|—
| For all supported x64-based editions of Windows Vista:
Windows6.0-KB3150220-x64.msu
Installation switches| See Microsoft Knowledge Base Article 934307
Restart requirement| In some cases, this update does not require a system restart. If the required files are being used, this update will require a system restart. If this behavior occurs, you receive a message that advises you to restart your system.
Removal information| WUSA.exe does not support uninstall of updates. To uninstall an update installed by WUSA, click Control Panel, and then clickSecurity. UnderWindows Update, clickView installed updates, and then select from the list of updates.
File information| See Microsoft Knowledge Base Article 3150220
Registry key verification| Note A registry key does not exist to validate the presence of this update.
Windows 7 (all editions)
Reference table

The following table contains the security update information for this software.
Security update file name| For all supported 32-bit editions of Windows 7:
Windows6.1-KB3150220-x86.msu
—|—
| For all supported x64-based editions of Windows 7:
Windows6.1-KB3150220-x64.msu
Installation switches| See Microsoft Knowledge Base Article 934307
Restart requirement| In some cases, this update does not require a system restart. If the required files are being used, this update will require a system restart. If this behavior occurs, you receive a message that advises you to restart your system.
Removal information| To uninstall an update installed by WUSA, use the /Uninstall setup switch or clickControl Panel, click System and Security, click View installed updates underWindows Update, and then select from the list of updates.
File information| See Microsoft Knowledge Base Article 3150220
Registry key verification| Note A registry key does not exist to validate the presence of this update.
Windows 8.1 (all editions)
Reference table

The following table contains the security update information for this software.
Security update file name| For all supported 32-bit editions of Windows 8.1:
Windows8.1-KB3150220-x86.msu
—|—
| For all supported x64-based editions of Windows 8.1:
Windows8.1-KB3150220-x64.msu
Installation switches| See Microsoft Knowledge Base Article 934307
Restart requirement| In some cases, this update does not require a system restart. If the required files are being used, this update will require a system restart. If this behavior occurs, you receive a message that advises you to restart your system.
Removal information| To uninstall an update installed by WUSA, use the /Uninstall setup switch or click Control Panel, click System and Security, clickWindows Update, clickInstalled updatesunderSee also, and then select from the list of updates.
File information| See Microsoft Knowledge Base Article 3150220
Registry key verification| Note A registry key does not exist to validate the presence of this update.

__

How to obtain help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

File Information

__

File hash information

File name	SHA1 hash	SHA256 hash
Windows6.0-KB3150220-x86.msu	44C4A7DD35484B67C72905D7DC39962D292363AB	B3F2DE74058017EB4DFEDD53725978BB6FCB819729ED46D302298DD3E0014130
Windows8-RT-KB3150220-x64.msu	AB4E044980F6BB15364F7165B4033B86BC7CB920	0C6BB08546D76BDFC856130E816DC79A222FE182892E16B1CE39F441408A16DE
Windows8.1-KB3150220-x64.msu	7E2493FDB9C285AC3901F8E05756E0833B539A0D	359FABEF33505984C4FFE82461FD627E5444D115392A23C725E1143054BD2BD5
Windows8.1-KB3150220-x86.msu	881389CD2CEC0384339DC6DEB15223D363709555	2177E3F5202A0DACB5758DD6888E4B63843403D475C5C3ACFA33346A82340D8D
Windows6.0-KB3150220-x64.msu	CC076F36F76A44AE01F3309706E8971DA45FFBFC	6469BA54424DE1BDA97EDC1892FB59A49E2502D6BAC1416C2863EEC2D6F41F9B
Windows6.1-KB3150220-x86.msu	F3529B8F2F21EA56C6E997FF654D59E4F65D2D6E	954EAA0B624198E59B6EDF4CB1E38AA9F7BBD3A4DBCCD19B260A186700731482
Windows6.1-KB3150220-x64.msu	4B29121B751476ED6B81AB570E2F607278D45824	D1B0A420C292BBC73538E650620017E0CD4DB89CD5A0F22E147C42C060846143

__

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables.Windows Vista and Windows Server 2008 file informationNotes

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

Version	Product	Milestone	Service branch
6.0.600 2.19xxx	Windows Vista or Windows Server 2008	SP2	GDR
6.0.600 2.23xxx	Windows Vista or Windows Server 2008	SP2	LDR

• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

• The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
  For all supported x86-based versionsFile name| File version| File size| Date| Time| Platform
  —|—|—|—|—|—
  Ehshell.dll| 6.0.6002.19634| 4,059,136| 07-Apr-2016| 22:49| x86
  Ehshell.dll| 6.0.6002.23948| 4,059,136| 07-Apr-2016| 22:49| x86
  For all supported x64-based versionsFile name| File version| File size| Date| Time| Platform
  —|—|—|—|—|—
  Ehshell.dll| 6.0.6002.19634| 4,059,136| 07-Apr-2016| 22:52| x86
  Ehshell.dll| 6.0.6002.23948| 4,059,136| 07-Apr-2016| 22:52| x86
  Windows Server 2012 file informationNotes

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

Version	Product	Milestone	Service branch
6.2.920 0.17xxx	Windows 8, Windows RT, or Windows Server 2012	RTM	GDR
6.2.920 0.21xxx	Windows 8, Windows RT, or Windows Server 2012	RTM	LDR

• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

• The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
  For all supported x64-based versionsFile name| File version| File size| Date| Time| Platform
  —|—|—|—|—|—
  Ehshell.dll| 6.2.9200.21826| 6,316,032| 06-Apr-2016| 17:12| x86
  Windows 8.1 and Windows Server 2012 R2 file informationNotes

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

Version	Product	Milestone	Service branch
6.3.960 0.17xxx	Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2	RTM	GDR

• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

• The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
  For all supported x64-based versionsFile name| File version| File size| Date| Time| Platform
  —|—|—|—|—|—
  Ehshell.dll| 6.3.9600.18299| 6,316,032| 07-Apr-2016| 17:27| x86
  For all supported x86-based versionsFile name| File version| File size| Date| Time| Platform
  —|—|—|—|—|—
  Ehshell.dll| 6.3.9600.18299| 6,316,032| 07-Apr-2016| 17:27| x86
  Windows 7 and Windows Server 2008 R2 file informationNotes

• The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

Version	Product	Milestone	Service branch
6.1.760 1.18xxx	Windows 7 or Windows Server 2008 R2	SP1	GDR
6.1.760 1.23xxx	Windows 7 or Windows Server 2008 R2	SP1	LDR

• GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
• The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.
  For all supported x86-based versionsFile name| File version| File size| Date| Time| Platform
  —|—|—|—|—|—
  Ehshell.dll| 6.1.7601.23434| 6,307,840| 21-Apr-2016| 15:52| x86
  Ehshell.dll| 6.1.7600.17545| 5,696,912| 21-Apr-2016| 15:04| x86
  For all supported x64-based versionsFile name| File version| File size| Date| Time| Platform
  —|—|—|—|—|—
  Ehshell.dll| 6.1.7601.23434| 6,307,840| 21-Apr-2016| 15:52| x86
  Ehshell.dll| 6.1.7600.17545| 5,696,912| 21-Apr-2016| 15:18| x86