********************************************************************
Microsoft Security Bulletin Summary for May 2015
Issued: May 12, 2015
********************************************************************
This bulletin summary lists security bulletins released for May 2015.
The full version of the Microsoft Security Bulletin Summary for May 2015 can be found at <https://technet.microsoft.com/library/security/ms15-may>.
Critical Security Bulletins
============================
MS15-043
– Affected Software:
– Windows Server 2003 Service Pack 2:
– Internet Explorer 6
– Internet Explorer 7
– Internet Explorer 8
– Windows Server 2003 x64 Edition Service Pack 2:
– Internet Explorer 6
– Internet Explorer 7
– Internet Explorer 8
– Windows Server 2003 with SP2 for Itanium-based Systems:
– Internet Explorer 6
– Internet Explorer 7
– Windows Vista Service Pack 2:
– Internet Explorer 7
– Internet Explorer 8
– Internet Explorer 9
– Windows Vista x64 Edition Service Pack 2:
– Internet Explorer 7
– Internet Explorer 8
– Internet Explorer 9
– Windows Server 2008 for 32-bit Systems Service Pack 2:
– Internet Explorer 7
– Internet Explorer 8
– Internet Explorer 9
(Windows Server 2008 Server Core installation not affected)
– Windows Server 2008 for x64-based Systems Service Pack 2:
– Internet Explorer 7
– Internet Explorer 8
– Internet Explorer 9
(Windows Server 2008 Server Core installation not affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2:
– Internet Explorer 7
– Windows 7 for 32-bit Systems Service Pack 1:
– Internet Explorer 8
– Internet Explorer 9
– Internet Explorer 10
– Internet Explorer 11
– Windows 7 for x64-based Systems Service Pack 1:
– Internet Explorer 8
– Internet Explorer 9
– Internet Explorer 10
– Internet Explorer 11
– Windows Server 2008 R2 for x64-based Systems
Service Pack 1:
– Internet Explorer 8
– Internet Explorer 9
– Internet Explorer 10
– Internet Explorer 11
(Windows Server 2008 R2 Server Core installation
not affected)
– Windows Server 2008 R2 for Itanium-based Systems Service
Pack 1:
– Internet Explorer 8
– Windows 8 for 32-bit Systems:
– Internet Explorer 10
– Windows 8 for x64-based Systems:
– Internet Explorer 10
– Windows Server 2012:
– Internet Explorer 10
(Windows Server 2012 Server Core installation not affected)
– Windows RT:
– Internet Explorer 10
– Windows 8.1 for 32-bit Systems:
– Internet Explorer 11
– Windows 8.1 for x64-based Systems:
– Internet Explorer 11
– Windows Server 2012 R2:
– Internet Explorer 11
(Windows Server 2012 R2 Server Core installation not affected)
– Windows RT 8.1:
– Internet Explorer 11
– Impact: Remote Code Execution
– Version Number: 1.0
MS15-044
– Affected Software:
– Windows Server 2003 Service Pack 2
– Windows Server 2003 Service Pack 2
– Microsoft .NET Framework 3.0 Service Pack 2
– Microsoft .NET Framework 4
– Windows Server 2003 x64 Edition Service Pack 2
– Windows Server 2003 x64 Edition Service Pack 2
– Microsoft .NET Framework 3.0 Service Pack 2
– Microsoft .NET Framework 4
– Windows Server 2003 with SP2 for Itanium-based Systems
– Windows Vista Service Pack 2
– Windows Vista Service Pack 2
– Microsoft .NET Framework 3.0 Service Pack 2
– Microsoft .NET Framework 4
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
– Windows Vista x64 Edition Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Microsoft .NET Framework 3.0 Service Pack 2
– Microsoft .NET Framework 4
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
– Windows Server 2008 for 32-bit Systems Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2
(Windows Server 2008 Server Core installation affected)
– Microsoft .NET Framework 3.0 Service Pack 2
– Microsoft .NET Framework 4
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
– Windows Server 2008 for x64-based Systems Service Pack 2
– Windows Server 2008 for x64-based Systems Service Pack 2
(Windows Server 2008 Server Core installation affected)
– Microsoft .NET Framework 3.0 Service Pack 2
– Microsoft .NET Framework 4
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Windows 7 for 32-bit Systems Service Pack 1
– Windows 7 for 32-bit Systems Service Pack 1
– Microsoft .NET Framework 3.5.1
– Windows 7 for x64-based Systems Service Pack 1
– Windows 7 for x64-based Systems Service Pack 1
– Microsoft .NET Framework 3.5.1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
– Microsoft .NET Framework 3.5.1
(Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems Service
– Windows 8 for 32-bit Systems
– Windows 8 for 32-bit Systems
– Microsoft .NET Framework 3.5
– Windows 8 for x64-based Systems
– Windows 8 for x64-based Systems
– Microsoft .NET Framework 3.5
– Windows 8.1 for 32-bit Systems
– Windows 8.1 for 32-bit Systems
– Microsoft .NET Framework 3.5
– Windows 8.1 for x64-based Systems
– Windows 8.1 for x64-based Systems
– Microsoft .NET Framework 3.5
– Windows Server 2012
– Windows Server 2012
– Microsoft .NET Framework 3.5
(Windows Server 2012 Server Core installation affected)
– Windows Server 2012 R2
– Windows Server 2012 R2
– Microsoft .NET Framework 3.5
(Windows Server 2012 R2 Server Core installation affected)
– Windows RT
– Windows RT 8.1
– Microsoft Office 2007 Service Pack 3
– Microsoft Office 2010 Service Pack 2 (32-bit editions)
– Microsoft Office 2010 Service Pack 2 (64-bit editions)
– Microsoft Live Meeting 2007 Console
– Microsoft Lync 2010 (32-bit)
– Microsoft Lync 2010 (64-bit)
– Microsoft Lync 2010 Attendee (user level install)
– Microsoft Lync 2010 Attendee (admin level install)
– Microsoft Lync 2013 Service Pack 1 (32-bit) (Skype for
Business)
– Microsoft Lync Basic 2013 Service Pack 1 (32-bit) (Skype for
Business)
– Microsoft Lync 2013 Service Pack 1 (64-bit) (Skype for
Business)
– Microsoft Lync Basic 2013 Service Pack 1 (64-bit) (Skype for
Business)
– Microsoft Silverlight 5 when installed on Mac
– Microsoft Silverlight 5 Developer Runtime when installed
on Mac
– Microsoft Silverlight 5 when installed on all supported
releases of Microsoft Windows clients
– Microsoft Silverlight 5 Developer Runtime when installed
on all supported releases of Microsoft Windows clients
– Microsoft Silverlight 5 when installed on all supported
releases of Microsoft Windows servers
– Microsoft Silverlight 5 Developer Runtime when installed
on all supported releases of Microsoft Windows servers
– Impact: Remote Code Execution
– Version Number: 1.0
MS15-045
– Affected Software:
– Windows Vista Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2
(Windows Server 2008 Server Core installation not affected)
– Windows Server 2008 for x64-based Systems Service Pack 2
(Windows Server 2008 Server Core installation not affected)
– Windows 7 for 32-bit Systems Service Pack 1
– Windows 7 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
(Windows Server 2008 R2 Server Core installation not affected)
– Windows 8 for 32-bit Systems
– Windows 8 for x64-based Systems
– Windows 8.1 for 32-bit Systems
– Windows 8.1 for x64-based Systems
– Windows Server 2012
(Windows Server 2012 Server Core installation not affected)
– Windows Server 2012 R2
(Windows Server 2012 R2 Server Core installation not affected)
– Windows RT
– Windows RT 8.1
– Impact: Remote Code Execution
– Version Number: 1.0
Important Security Bulletins
============================
MS15-046
– Affected Software:
– Microsoft Office 2007 Service Pack 3
– Microsoft Office 2010 Service Pack 2 (32-bit editions)
– Microsoft Office 2010 Service Pack 2 (32-bit editions)
– Microsoft Excel 2010 Service Pack 2 (32-bit editions)
– Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions)
– Microsoft Word 2010 Service Pack 2 (32-bit editions)
– Microsoft Office 2010 Service Pack 2 (64-bit editions)
– Microsoft Office 2010 Service Pack 2 (64-bit editions)
– Microsoft Excel 2010 Service Pack 2 (64-bit editions)
– Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions)
– Microsoft Word 2010 Service Pack 2 (64-bit editions)
– Microsoft Office 2013 Service Pack 1 (32-bit editions)
– Microsoft Office 2013 Service Pack 1 (32-bit editions)
– Microsoft Excel 2013 Service Pack 1 (32-bit editions)
– Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions)
– Microsoft Word 2013 Service Pack 1 (32-bit editions)
– Microsoft Office 2013 Service Pack 1 (64-bit editions)
– Microsoft Office 2013 Service Pack 1 (64-bit editions)
– Microsoft Excel 2013 Service Pack 1 (64-bit editions)
– Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions)
– Microsoft Word 2013 Service Pack 1 (64-bit editions)
– Microsoft Office 2013 RT Service Pack 1
– Microsoft Office 2013 RT Service Pack 1
– Microsoft Excel 2013 RT Service Pack 1
– Microsoft PowerPoint 2013 RT Service Pack 1
– Microsoft Word 2013 RT Service Pack 1
– Microsoft Office for Mac 2011
– Microsoft Office for Mac 2011
– Microsoft Excel for Mac 2011
– Microsoft PowerPoint for Mac 2011
– Microsoft Word for Mac 2011
– Microsoft PowerPoint Viewer
– Microsoft SharePoint Server 2010 Service Pack 2
– Word Automation Services
– Excel Services
– Microsoft SharePoint Server 2013 Service Pack 1
– Word Automation Services
– Excel Services
– Microsoft Office Web Apps 2010 Service Pack 2
– Microsoft Office Web Apps 2010 Service Pack 2
– Microsoft Excel Web Apps 2010 Service Pack 2
– Microsoft Office Web Apps 2013 Service Pack 1
– Microsoft SharePoint Server 2010 Service Pack 2
– Microsoft SharePoint Foundation 2010 Service Pack 2
– Microsoft SharePoint Server 2013 Service Pack 1
– Impact: Remote Code Execution
– Version Number: 1.0
MS15-047
– Affected Software:
– Microsoft SharePoint Server 2007 Service Pack 3 (32-bit editions)
– Microsoft SharePoint Server 2007 Service Pack 3 (64-bit editions)
– Microsoft SharePoint Server 2010 Service Pack 2
– Microsoft SharePoint Foundation 2010 Service Pack 2
– Microsoft SharePoint Server 2010 Service Pack 2
– Microsoft SharePoint Server 2013 Service Pack 1
– Microsoft SharePoint Foundation 2013 Service Pack 1
– Impact: Remote Code Execution
– Version Number: 1.0
MS15-048
– Affected Software:
– Affected Software:
– Windows Server 2003 Service Pack 2
– Microsoft .NET Framework 1.1 Service Pack 1
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 4
– Windows Server 2003 x64 Edition Service Pack 2
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 4
– Windows Server 2003 with SP2 for Itanium-based Systems
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 4
– Windows Vista Service Pack 2
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 4
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
– Windows Vista x64 Edition Service Pack 2
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 4
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
– Windows Server 2008 for 32-bit Systems Service Pack 2
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 4
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
(Windows Server 2008 Server Core installation not affected)
– Windows Server 2008 for x64-based Systems Service Pack 2
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 4
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
(Windows Server 2008 Server Core installation not affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Microsoft .NET Framework 2.0 Service Pack 2
– Microsoft .NET Framework 4
– Windows 7 for 32-bit Systems
– Microsoft .NET Framework 3.5.1
– Microsoft .NET Framework 4
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
– Windows 7 for x64-based Systems Service Pack 1
– Microsoft .NET Framework 3.5.1
– Microsoft .NET Framework 4
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
– Microsoft .NET Framework 3.5.1
– Microsoft .NET Framework 4
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
(Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems
Service Pack 1
– Microsoft .NET Framework 3.5.1
– Microsoft .NET Framework 4
– Windows 8 for 32-bit Systems
– Microsoft .NET Framework 3.5
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
– Windows 8 for x64-based Systems
– Microsoft .NET Framework 3.5
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
– Windows 8.1 for 32-bit Systems
– Microsoft .NET Framework 3.5
– Microsoft .NET Framework 4.5.1/4.5.2
– Windows 8.1 for x64-based Systems
– Microsoft .NET Framework 3.5
– Microsoft .NET Framework 4.5.1/4.5.2
– Windows Server 2012
– Microsoft .NET Framework 3.5
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
(Windows Server 2012 Server Core installation affected)
– Windows Server 2012 R2
– Microsoft .NET Framework 3.5
– Microsoft .NET Framework 4.5.1/4.5.2
(Windows Server 2012 R2 Server Core installation affected)
– Windows RT
– Microsoft .NET Framework 4.5/4.5.1/4.5.2
– Windows RT 8.1
– Microsoft .NET Framework 4.5.1/4.5.2
– Impact: Elevation of Privilege
– Version Number: 1.0
MS15-049
– Affected Software:
– Microsoft Silverlight 5 when installed on Mac
– Microsoft Silverlight 5 Developer Runtime when installed
on Mac
– Microsoft Silverlight 5 when installed on all supported
releases of Microsoft Windows clients
– Microsoft Silverlight 5 Developer Runtime when installed
on all supported releases of Microsoft Windows clients
– Microsoft Silverlight 5 when installed on all supported
releases of Microsoft Windows servers
– Microsoft Silverlight 5 Developer Runtime when installed
on all supported releases of Microsoft Windows servers
– Impact: Elevation of Privilege
– Version Number: 1.0
MS15-050
– Windows Server 2003 Service Pack 2
– Windows Server 2003 x64 Edition Service Pack 2
– Windows Server 2003 with SP2 for Itanium-based Systems
– Windows Vista Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2
(Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for x64-based Systems Service Pack 2
(Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Windows 7 for 32-bit Systems Service Pack 1
– Windows 7 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
(Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems Service
Pack 1
– Windows 8 for 32-bit Systems
– Windows 8 for x64-based Systems
– Windows 8.1 for 32-bit Systems
– Windows 8.1 for x64-based Systems
– Windows Server 2012
(Windows Server 2012 Server Core installation affected)
– Windows Server 2012 R2
(Windows Server 2012 R2 Server Core installation affected)
– Windows RT
– Windows RT 8.1
– Impact: Elevation of Privilege
– Version Number: 1.0
MS15-051
– Affected Software:
– Windows Server 2003 Service Pack 2
– Windows Server 2003 x64 Edition Service Pack 2
– Windows Server 2003 with SP2 for Itanium-based Systems
– Windows Vista Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2
(Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for x64-based Systems Service Pack 2
(Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Windows 7 for 32-bit Systems Service Pack 1
– Windows 7 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
(Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems Service
Pack 1
– Windows 8 for 32-bit Systems
– Windows 8 for x64-based Systems
– Windows 8.1 for 32-bit Systems
– Windows 8.1 for x64-based Systems
– Windows Server 2012
(Windows Server 2012 Server Core installation affected)
– Windows Server 2012 R2
(Windows Server 2012 R2 Server Core installation affected)
– Windows RT
– Windows RT 8.1
– Impact: Elevation of Privilege
– Version Number: 1.0
MS15-052
– Affected Software:
– Windows 8 for 32-bit Systems
– Windows 8 for x64-based Systems
– Windows 8.1 for 32-bit Systems
– Windows 8.1 for x64-based Systems
– Windows Server 2012
(Windows Server 2012 Server Core installation affected)
– Windows Server 2012 R2
(Windows Server 2012 R2 Server Core installation affected)
– Windows RT
– Windows RT 8.1
– Impact: Security Feature Bypass
– Version Number: 1.0
MS15-053
– Affected Software:
– Windows Server 2003 Service Pack 2:
– JScript 5.6 and VBScript 5.6
– JScript 5.7 and VBScript 5.7
– Windows Server 2003 x64 Edition Service Pack 2:
– JScript 5.6 and VBScript 5.6
– JScript 5.7 and VBScript 5.7
– Windows Server 2003 with SP2 for Itanium-based Systems:
– JScript 5.6 and VBScript 5.6
– JScript 5.7 and VBScript 5.7
– Windows Vista Service Pack 2:
– JScript 5.7 and VBScript 5.7
– Windows Vista x64 Edition Service Pack 2:
– JScript 5.7 and VBScript 5.7
– Windows Server 2008 for 32-bit Systems Service Pack 2:
– JScript 5.7 and VBScript 5.7
(Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for x64-based Systems Service Pack 2:
– JScript 5.7 and VBScript 5.7
(Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2:
– JScript 5.7 and VBScript 5.7
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
Server Core installation:
– JScript 5.8 and VBScript 5.8
(Windows Server 2008 R2 Server Core installation only affected)
– Impact: Security Feature Bypass
– Version Number: 1.0
MS15-054
– Affected Software:
– Windows Vista Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2
(Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for x64-based Systems Service Pack 2
(Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Windows 7 for 32-bit Systems Service Pack 1
– Windows 7 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
(Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems Service
Pack 1
– Windows 8 for 32-bit Systems
– Windows 8 for x64-based Systems
– Windows 8.1 for 32-bit Systems
– Windows 8.1 for x64-based Systems
– Windows Server 2012
(Windows Server 2012 Server Core installation affected)
– Windows Server 2012 R2
(Windows Server 2012 R2 Server Core installation affected)
– Windows RT
– Windows RT 8.1
– Impact: Denial of Service
– Version Number: 1.0
MS15-055
– Affected Software:
– Windows Server 2003 Service Pack 2
– Windows Server 2003 x64 Edition Service Pack 2
– Windows Server 2003 with SP2 for Itanium-based Systems
– Windows Vista Service Pack 2
– Windows Vista x64 Edition Service Pack 2
– Windows Server 2008 for 32-bit Systems Service Pack 2
(Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for x64-based Systems Service Pack 2
(Windows Server 2008 Server Core installation affected)
– Windows Server 2008 for Itanium-based Systems Service Pack 2
– Windows 7 for 32-bit Systems Service Pack 1
– Windows 7 for x64-based Systems Service Pack 1
– Windows Server 2008 R2 for x64-based Systems Service Pack 1
(Windows Server 2008 R2 Server Core installation affected)
– Windows Server 2008 R2 for Itanium-based Systems Service
Pack 1
– Windows 8 for 32-bit Systems
– Windows 8 for x64-based Systems
– Windows 8.1 for 32-bit Systems
– Windows 8.1 for x64-based Systems
– Windows Server 2012
(Windows Server 2012 Server Core installation affected)
– Windows Server 2012 R2
(Windows Server 2012 R2 Server Core installation affected)
– Windows RT
– Windows RT 8.1
– Impact: Information Disclosure
– Version Number: 1.0