CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
73.9%
NoticeAs of January 18, 2018, update 4055002 applies only to Windows Server 2008 SP2. For more information about the January 2018 Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 7 SP1 and Windows Server R2 SP1, see the following Knowledge Base article:
4074880 - Description of the Security and Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, and 4.7.1 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4074880).
This security update resolves a security feature bypass vulnerability that exists when Microsoft .NET Framework and .NET Core components do not completely validate certificates. This security update addresses the vulnerability by helping to make sure that .NET Framework and .NET Core components completely validate certificates. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-0786.Additionally, this security update resolves a denial of service vulnerability that exists when .NET Framework and .NET Core components process XML documents incorrectly. This update addresses the vulnerability by correcting how .NET Framework and .NET Core component applications handle XML document processing. To learn more about this vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2018-0764.Important
If certificates are used for authentication, the authenticator examines the certificate that is provided by the remote endpoint and looks for the correct purpose object identifier in Application Policies extensions. If a certificate is used for client authentication, the object identifier for Client Authentication must be present in the EKU extensions of the certificate, or authentication fails. The object identifier for Client Authentication is 1.3.6.1.5.5.7.3.2. Likewise, when a certificate is used for server authentication, the object identifier for Server Authentication must be present in the EKU extensions of the certificate, or authentication fails. The object identifier for Server Authentication is 1.3.6.1.5.5.7.3.1. Certificates that have no EKU extension continue to authenticate correctly.
Consider making changes to your componentβs certificates to make sure that they are using the correct EKU OID attributes and are secured correctly. If you temporarily cannot access correctly reissued certificates, you can choose to opt in or out of the security change to avoid any connectivity effects. To do this, specify the following appsetting value in the configuration file: <appSettings> <add key=βwcf:useLegacyCertificateUsagePolicyβ value=βtrueβ /> </appSettings> Note Setting the value to βtrueβ will opt out of the security changes.
This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.
On your WSUS server, follow these steps:
For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:20180109 Security update deployment information: January 9, 2018
Note We do not recommend that you remove any security update. To remove this update, use thePrograms and Features item in Control Panel.
This update does not require a system restart after you apply it unless files that are being updated are locked or are being used.
This update replaces the following updates:
Package name | PackageHashSHA1 | PackageHashSHA2 |
---|---|---|
NDP47-KB4055002-x64.exe | 2DF49345A8319C622A236CA467C030AAC3B77918 | 44D12D5A0CDC419EE79086C7AFD0B315F7E3971580F42AA89714C421BE50CC15 |
NDP47-KB4055002-x86.exe | 36E112DAD5BD5177A4432208D6F6DCFE7413AE51 | EBD34CCA8DDDD5824295348D5C9454A343C45F22DD27BE996E3F159E33D26844 |
The English (United States) version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight-saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.For all x86-based systemsFile name | File version | File size | Date | Time |
---|---|---|---|---|
Aspnet_perf.dll | 4.7.2117.0 | 42,648 | 29-Dec-2017 | 17:47 |
aspnet_wp.exe | 4.7.2117.0 | 46,176 | 29-Dec-2017 | 17:47 |
clr.dll | 4.7.2117.0 | 7,221,880 | 29-Dec-2017 | 17:47 |
clrjit.dll | 4.7.2117.0 | 522,888 | 29-Dec-2017 | 17:47 |
dfdll.dll | 4.7.2117.0 | 159,872 | 29-Dec-2017 | 17:47 |
GlobalUserInterface.CompositeFont | 116,922 | 29-Dec-2017 | 17:47 | |
mscordacwks.dll | 4.7.2117.0 | 1,341,080 | 29-Dec-2017 | 17:47 |
mscordbi.dll | 4.7.2117.0 | 1,164,944 | 29-Dec-2017 | 17:47 |
mscoreei.dll | 4.7.2117.0 | 511,632 | 29-Dec-2017 | 17:47 |
mscorlib.dll | 4.7.2117.0 | 5,614,224 | 29-Dec-2017 | 17:47 |
msvcp120_clr0400.dll | 12.0.52519.0 | 485,576 | 29-Dec-2017 | 17:49 |
msvcr120_clr0400.dll | 12.0.52519.0 | 987,840 | 29-Dec-2017 | 17:49 |
VsVersion.dll | 14.7.2117.0 | 19,088 | 29-Dec-2017 | 17:47 |
peverify.dll | 4.7.2117.0 | 188,560 | 29-Dec-2017 | 17:47 |
PresentationCore.dll | 4.7.2117.0 | 3,618,632 | 29-Dec-2017 | 17:47 |
PresentationFramework.dll | 4.7.2117.0 | 6,200,160 | 29-Dec-2017 | 17:47 |
PresentationHost_v0400.dll | 4.7.2117.0 | 197,320 | 29-Dec-2017 | 17:47 |
PresentationHost_v0400.dll.mui | 4.7.2117.0 | 84,696 | 29-Dec-2017 | 17:47 |
PresentationNative_v0400.dll | 4.7.2117.0 | 827,088 | 29-Dec-2017 | 17:47 |
ServiceMonikerSupport.dll | 4.7.2612.0 | 29,376 | 29-Dec-2017 | 17:49 |
SMDiagnostics.dll | 4.7.2612.0 | 73,376 | 29-Dec-2017 | 17:49 |
SOS.dll | 4.7.2117.0 | 743,544 | 29-Dec-2017 | 17:47 |
System.Activities.dll | 4.7.2612.0 | 1,532,600 | 29-Dec-2017 | 17:49 |
System.ComponentModel.DataAnnotations.dll | 4.7.2117.0 | 124,480 | 29-Dec-2017 | 17:47 |
System.Core.dll | 4.7.2117.0 | 1,381,528 | 29-Dec-2017 | 17:47 |
System.Data.Entity.dll | 4.7.2117.0 | 4,034,232 | 29-Dec-2017 | 17:47 |
System.IdentityModel.dll | 4.7.2612.0 | 1,088,720 | 29-Dec-2017 | 17:49 |
System.IdentityModel.Services.dll | 4.7.2612.0 | 198,368 | 29-Dec-2017 | 17:49 |
System.Runtime.Serialization.dll | 4.7.2612.0 | 1,054,464 | 29-Dec-2017 | 17:49 |
System.ServiceModel.Channels.dll | 4.7.2612.0 | 157,920 | 29-Dec-2017 | 17:49 |
System.ServiceModel.Discovery.dll | 4.7.2612.0 | 308,448 | 29-Dec-2017 | 17:49 |
System.ServiceModel.dll | 4.7.2612.0 | 6,315,712 | 29-Dec-2017 | 17:49 |
System.ServiceModel.Internals.dll | 4.7.2612.0 | 253,696 | 29-Dec-2017 | 17:49 |
System.ServiceModel.Routing.dll | 4.7.2117.0 | 130,776 | 29-Dec-2017 | 17:47 |
System.ServiceModel.WasHosting.dll | 4.7.2612.0 | 39,656 | 29-Dec-2017 | 17:49 |
System.Web.ApplicationServices.dll | 4.7.2117.0 | 70,920 | 29-Dec-2017 | 17:47 |
System.Web.Extensions.dll | 4.7.2117.0 | 1,849,552 | 29-Dec-2017 | 17:47 |
System.Workflow.Activities.dll | 4.7.2117.0 | 1,051,352 | 29-Dec-2017 | 17:47 |
System.Workflow.ComponentModel.dll | 4.7.2117.0 | 1,541,864 | 29-Dec-2017 | 17:47 |
System.Workflow.Runtime.dll | 4.7.2117.0 | 499,400 | 29-Dec-2017 | 17:47 |
System.Runtime.Caching.dll | 4.7.2117.0 | 109,928 | 29-Dec-2017 | 17:47 |
System.Data.dll | 4.7.2117.0 | 3,391,128 | 29-Dec-2017 | 17:47 |
System.Data.SqlXml.dll | 4.7.2612.0 | 734,400 | 29-Dec-2017 | 17:49 |
System.Deployment.dll | 4.7.2117.0 | 845,496 | 29-Dec-2017 | 17:47 |
System.DirectoryServices.Protocols.dll | 4.7.2117.0 | 200,616 | 29-Dec-2017 | 17:47 |
System.dll | 4.7.2117.0 | 3,525,376 | 29-Dec-2017 | 17:47 |
System.Drawing.dll | 4.7.2117.0 | 599,344 | 29-Dec-2017 | 17:47 |
System.Management.dll | 4.7.2117.0 | 415,416 | 29-Dec-2017 | 17:47 |
System.Runtime.Remoting.dll | 4.7.2117.0 | 346,464 | 29-Dec-2017 | 17:47 |
System.Security.dll | 4.7.2117.0 | 316,592 | 29-Dec-2017 | 17:47 |
System.Transactions.dll | 4.7.2117.0 | 306,496 | 29-Dec-2017 | 17:47 |
System.Web.dll | 4.7.2117.0 | 5,405,848 | 29-Dec-2017 | 17:47 |
System.Windows.Controls.Ribbon.dll | 4.7.2117.0 | 742,792 | 29-Dec-2017 | 17:47 |
System.Windows.Forms.dll | 4.7.2117.0 | 5,181,648 | 29-Dec-2017 | 17:47 |
System.Xaml.dll | 4.7.2117.0 | 641,168 | 29-Dec-2017 | 17:47 |
System.Xml.dll | 4.7.2612.0 | 2,670,224 | 29-Dec-2017 | 17:49 |
webengine.dll | 4.7.2117.0 | 24,720 | 29-Dec-2017 | 17:47 |
webengine4.dll | 4.7.2117.0 | 550,040 | 29-Dec-2017 | 17:47 |
WindowsBase.dll | 4.7.2117.0 | 1,283,896 | 29-Dec-2017 | 17:47 |
WMINet_Utils.dll | 4.7.2117.0 | 136,344 | 29-Dec-2017 | 17:47 |
WorkflowServiceHostPerformanceCounters.dll | 4.7.2117.0 | 88,464 | 29-Dec-2017 | 17:47 |
WPFFontCache_v0400.exe.mui | 4.7.2117.0 | 19,144 | 29-Dec-2017 | 17:47 |
WPFFontCache_v0400.exe | 4.7.2117.0 | 25,696 | 29-Dec-2017 | 17:47 |
wpfgfx_v0400.dll | 4.7.2117.0 | 1,344,672 | 29-Dec-2017 | 17:47 |
Placeholder.dll | 4.7.2117.0 | 24,728 | 29-Dec-2017 | 17:47 |
PenIMC2_v0400.dll | 4.7.2117.0 | 82,080 | 29-Dec-2017 | 17:47 |
For all x64-based systemsFile name | File version | File size | Date | Time |
β | β | β | β | β |
Aspnet_perf.dll | 4.7.2117.0 | 46,232 | 29-Dec-2017 | 18:08 |
Aspnet_perf.dll | 4.7.2117.0 | 42,648 | 29-Dec-2017 | 17:47 |
aspnet_wp.exe | 4.7.2117.0 | 50,784 | 29-Dec-2017 | 18:08 |
aspnet_wp.exe | 4.7.2117.0 | 46,176 | 29-Dec-2017 | 17:47 |
clr.dll | 4.7.2117.0 | 10,326,136 | 29-Dec-2017 | 18:08 |
clr.dll | 4.7.2117.0 | 7,221,880 | 29-Dec-2017 | 17:47 |
clrjit.dll | 4.7.2117.0 | 1,128,584 | 29-Dec-2017 | 18:08 |
clrjit.dll | 4.7.2117.0 | 522,888 | 29-Dec-2017 | 17:47 |
compatjit.dll | 4.7.2117.0 | 1,259,664 | 29-Dec-2017 | 18:08 |
dfdll.dll | 4.7.2117.0 | 191,616 | 29-Dec-2017 | 18:08 |
dfdll.dll | 4.7.2117.0 | 159,872 | 29-Dec-2017 | 17:47 |
GlobalUserInterface.CompositeFont | 116,922 | 29-Dec-2017 | 17:47 | |
mscordacwks.dll | 4.7.2117.0 | 1,838,232 | 29-Dec-2017 | 18:08 |
mscordacwks.dll | 4.7.2117.0 | 1,341,080 | 29-Dec-2017 | 17:47 |
mscordbi.dll | 4.7.2117.0 | 1,618,576 | 29-Dec-2017 | 18:08 |
mscordbi.dll | 4.7.2117.0 | 1,164,944 | 29-Dec-2017 | 17:47 |
mscoreei.dll | 4.7.2117.0 | 636,048 | 29-Dec-2017 | 18:08 |
mscoreei.dll | 4.7.2117.0 | 511,632 | 29-Dec-2017 | 17:47 |
mscorlib.dll | 4.7.2117.0 | 5,401,736 | 29-Dec-2017 | 18:08 |
mscorlib.dll | 4.7.2117.0 | 5,614,224 | 29-Dec-2017 | 17:47 |
msvcp120_clr0400.dll | 12.0.52519.0 | 690,008 | 29-Dec-2017 | 18:08 |
msvcp120_clr0400.dll | 12.0.52519.0 | 485,576 | 29-Dec-2017 | 17:49 |
msvcr120_clr0400.dll | 12.0.52519.0 | 993,632 | 29-Dec-2017 | 18:08 |
msvcr120_clr0400.dll | 12.0.52519.0 | 987,840 | 29-Dec-2017 | 17:49 |
VsVersion.dll | 14.7.2117.0 | 19,088 | 29-Dec-2017 | 18:08 |
VsVersion.dll | 14.7.2117.0 | 19,088 | 29-Dec-2017 | 17:47 |
peverify.dll | 4.7.2117.0 | 260,240 | 29-Dec-2017 | 18:08 |
peverify.dll | 4.7.2117.0 | 188,560 | 29-Dec-2017 | 17:47 |
PresentationCore.dll | 4.7.2117.0 | 3,592,880 | 29-Dec-2017 | 18:08 |
PresentationCore.dll | 4.7.2117.0 | 3,618,632 | 29-Dec-2017 | 17:47 |
PresentationFramework.dll | 4.7.2117.0 | 6,200,160 | 29-Dec-2017 | 17:47 |
PresentationHost_v0400.dll | 4.7.2117.0 | 256,712 | 29-Dec-2017 | 18:08 |
PresentationHost_v0400.dll.mui | 4.7.2117.0 | 84,696 | 29-Dec-2017 | 18:08 |
PresentationHost_v0400.dll | 4.7.2117.0 | 197,320 | 29-Dec-2017 | 17:47 |
PresentationHost_v0400.dll.mui | 4.7.2117.0 | 84,696 | 29-Dec-2017 | 17:47 |
PresentationNative_v0400.dll | 4.7.2117.0 | 1,109,712 | 29-Dec-2017 | 18:08 |
PresentationNative_v0400.dll | 4.7.2117.0 | 827,088 | 29-Dec-2017 | 17:47 |
ServiceMonikerSupport.dll | 4.7.2612.0 | 31,424 | 29-Dec-2017 | 18:08 |
ServiceMonikerSupport.dll | 4.7.2612.0 | 29,376 | 29-Dec-2017 | 17:49 |
SMDiagnostics.dll | 4.7.2612.0 | 73,376 | 29-Dec-2017 | 17:49 |
SOS.dll | 4.7.2117.0 | 872,056 | 29-Dec-2017 | 18:08 |
SOS.dll | 4.7.2117.0 | 743,544 | 29-Dec-2017 | 17:47 |
System.Activities.dll | 4.7.2612.0 | 1,532,600 | 29-Dec-2017 | 17:49 |
System.ComponentModel.DataAnnotations.dll | 4.7.2117.0 | 124,480 | 29-Dec-2017 | 17:47 |
System.Core.dll | 4.7.2117.0 | 1,381,528 | 29-Dec-2017 | 17:47 |
System.Data.Entity.dll | 4.7.2117.0 | 4,034,232 | 29-Dec-2017 | 17:47 |
System.IdentityModel.dll | 4.7.2612.0 | 1,088,720 | 29-Dec-2017 | 17:49 |
System.IdentityModel.Services.dll | 4.7.2612.0 | 198,368 | 29-Dec-2017 | 17:49 |
System.Runtime.Serialization.dll | 4.7.2612.0 | 1,054,464 | 29-Dec-2017 | 17:49 |
System.ServiceModel.Channels.dll | 4.7.2612.0 | 157,920 | 29-Dec-2017 | 17:49 |
System.ServiceModel.Discovery.dll | 4.7.2612.0 | 308,448 | 29-Dec-2017 | 17:49 |
System.ServiceModel.dll | 4.7.2612.0 | 6,315,712 | 29-Dec-2017 | 17:49 |
System.ServiceModel.Internals.dll | 4.7.2612.0 | 253,696 | 29-Dec-2017 | 17:49 |
System.ServiceModel.Routing.dll | 4.7.2117.0 | 130,776 | 29-Dec-2017 | 17:47 |
System.ServiceModel.WasHosting.dll | 4.7.2612.0 | 39,656 | 29-Dec-2017 | 17:49 |
System.Web.ApplicationServices.dll | 4.7.2117.0 | 70,920 | 29-Dec-2017 | 17:47 |
System.Web.Extensions.dll | 4.7.2117.0 | 1,849,552 | 29-Dec-2017 | 17:47 |
System.Workflow.Activities.dll | 4.7.2117.0 | 1,051,352 | 29-Dec-2017 | 17:47 |
System.Workflow.ComponentModel.dll | 4.7.2117.0 | 1,541,864 | 29-Dec-2017 | 17:47 |
System.Workflow.Runtime.dll | 4.7.2117.0 | 499,400 | 29-Dec-2017 | 17:47 |
System.Runtime.Caching.dll | 4.7.2117.0 | 109,928 | 29-Dec-2017 | 17:47 |
System.Data.dll | 4.7.2117.0 | 3,455,128 | 29-Dec-2017 | 18:08 |
System.Data.dll | 4.7.2117.0 | 3,391,128 | 29-Dec-2017 | 17:47 |
System.Data.SqlXml.dll | 4.7.2612.0 | 734,400 | 29-Dec-2017 | 17:49 |
System.Deployment.dll | 4.7.2117.0 | 845,496 | 29-Dec-2017 | 17:47 |
System.DirectoryServices.Protocols.dll | 4.7.2117.0 | 200,616 | 29-Dec-2017 | 17:47 |
System.dll | 4.7.2117.0 | 3,525,376 | 29-Dec-2017 | 17:47 |
System.Drawing.dll | 4.7.2117.0 | 599,344 | 29-Dec-2017 | 17:47 |
System.Management.dll | 4.7.2117.0 | 415,416 | 29-Dec-2017 | 17:47 |
System.Runtime.Remoting.dll | 4.7.2117.0 | 346,464 | 29-Dec-2017 | 17:47 |
System.Security.dll | 4.7.2117.0 | 316,592 | 29-Dec-2017 | 17:47 |
System.Transactions.dll | 4.7.2117.0 | 310,968 | 29-Dec-2017 | 18:08 |
System.Transactions.dll | 4.7.2117.0 | 306,496 | 29-Dec-2017 | 17:47 |
System.Web.dll | 4.7.2117.0 | 5,388,952 | 29-Dec-2017 | 18:08 |
System.Web.dll | 4.7.2117.0 | 5,405,848 | 29-Dec-2017 | 17:47 |
System.Windows.Controls.Ribbon.dll | 4.7.2117.0 | 742,792 | 29-Dec-2017 | 17:47 |
System.Windows.Forms.dll | 4.7.2117.0 | 5,181,648 | 29-Dec-2017 | 17:47 |
System.Xaml.dll | 4.7.2117.0 | 641,168 | 29-Dec-2017 | 17:47 |
System.XML.dll | 4.7.2612.0 | 2,670,224 | 29-Dec-2017 | 17:49 |
webengine.dll | 4.7.2117.0 | 26,256 | 29-Dec-2017 | 18:08 |
webengine.dll | 4.7.2117.0 | 24,720 | 29-Dec-2017 | 17:47 |
webengine4.dll | 4.7.2117.0 | 667,800 | 29-Dec-2017 | 18:08 |
webengine4.dll | 4.7.2117.0 | 550,040 | 29-Dec-2017 | 17:47 |
WindowsBase.dll | 4.7.2117.0 | 1,283,896 | 29-Dec-2017 | 17:47 |
WMINet_Utils.dll | 4.7.2117.0 | 188,064 | 29-Dec-2017 | 18:08 |
WMINet_Utils.dll | 4.7.2117.0 | 136,344 | 29-Dec-2017 | 17:47 |
WorkflowServiceHostPerformanceCounters.dll | 4.7.2117.0 | 100,240 | 29-Dec-2017 | 18:08 |
WorkflowServiceHostPerformanceCounters.dll | 4.7.2117.0 | 88,464 | 29-Dec-2017 | 17:47 |
WPFFontCache_v0400.exe.mui | 4.7.2117.0 | 19,144 | 29-Dec-2017 | 18:08 |
WPFFontCache_v0400.exe.mui | 4.7.2117.0 | 19,144 | 29-Dec-2017 | 17:47 |
WPFFontCache_v0400.exe | 4.7.2117.0 | 26,720 | 29-Dec-2017 | 18:08 |
WPFFontCache_v0400.exe | 4.7.2117.0 | 25,696 | 29-Dec-2017 | 17:47 |
wpfgfx_v0400.dll | 4.7.2117.0 | 1,765,024 | 29-Dec-2017 | 18:08 |
wpfgfx_v0400.dll | 4.7.2117.0 | 1,344,672 | 29-Dec-2017 | 17:47 |
Placeholder.dll | 4.7.2117.0 | 25,752 | 29-Dec-2017 | 18:08 |
Placeholder.dll | 4.7.2117.0 | 24,728 | 29-Dec-2017 | 17:47 |
PenIMC2_v0400.dll | 4.7.2117.0 | 98,976 | 29-Dec-2017 | 18:08 |
PenIMC2_v0400.dll | 4.7.2117.0 | 82,080 | 29-Dec-2017 | 17:47 |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
73.9%