MS14-052: Cumulative security update for Internet Explorer: September 9, 2014

This security update resolves 1 publicly disclosed and 36 privately reported vulnerabilities in Internet Explorer. This security update protects Internet Explorer from being attacked when you view a specially crafted webpage.

Additionally, this security update includes several non-security fixes for Internet Explorer.

How to obtain this update

Microsoft update

Use the Windows automatic updating feature to install the update from Microsoft Update. To do this, get security updates automatically on the Microsoft Safety and Security Center website.

Microsoft Download Center

To download the security updates, see the download links in Microsoft Security Bulletin MS14-052.

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security troubleshooting and support

Help protect your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International support

Non-security-related fixes that are included in this security update

General distribution release (GDR) fixes

Individual updates may not be installed, depending on your version of Windows and the version of the affected application. You should view the individual articles to determine your update status.

Known issues

• You may repeatedly receive error pages in Internet Explorer 7 and Internet Explorer 8. See update 3004250
  (http://support.microsoft.com/kb/3004250)
   for more information.

Prerequisites

Customers who are running Windows 8.1, Windows Server 2012 R2, or Windows RT 8.1 must install the 2919355 update that was released on April, 2014 before they install the update. For more information about the prerequisite update, see Microsoft Knowledge Base Article 2919355.

Customers who are running Internet Explorer 11 on Windows 7 or Windows Server 2008 R2 must install the 2929437 update that was released in April, 2014 before they install the update. For more information about this prerequisite update, see Microsoft Knowledge Base Article 2929437.

File hash information

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). Be aware that dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time bias. The dates and times may also change when you perform certain operations on the files.

Windows Server 2003 file information

• The files that apply to a specific milestone (SPn) and service branch (QFE, GDR) are noted in the "SP requirement" and "Service branch" columns.
• GDR service branches contain only fixes that are broadly released to address widespread, critical issues. QFE service branches contain hotfixes in addition to broadly released fixes.
• In addition to the files that are listed in these tables, this software update also installs an associated security catalog file (KBnumber.cat) that is signed with a Microsoft digital signature.

Internet Explorer 6

Internet Explorer 6 on all supported 32-bit versions of Windows Server 2003

Internet Explorer 6 on all supported Itanium-based versions of Windows Server 2003

Internet Explorer 6 on all supported x64-based versions of Windows Server 2003

Internet Explorer 7

Internet Explorer 7 on all supported 32-bit versions of Windows Server 2003

Internet Explorer 7 on all supported Itanium-based versions of Windows Server 2003

Internet Explorer 7 on all supported x64-based versions of Windows Server 2003

Internet Explorer 8

Internet Explorer 8 on all supported 32-bit versions of Windows Server 2003

Internet Explorer 8 on all supported x64-based versions of Windows Server 2003

Windows Vista and Windows Server 2008 file information

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

Internet Explorer 7

Internet Explorer 7 on all supported 32-bit versions of Windows Vista and Windows Server 2008

Internet Explorer 7 on all supported Itanium-based versions of Windows Server 2008

Internet Explorer 7 on all supported x64-based versions of Windows Vista and Windows Server 2008

Internet Explorer 8

Internet Explorer 8 on all supported 32-bit versions of Windows Vista and Windows Server 2008

Internet Explorer 8 on all supported x64-based versions of Windows Vista and Windows Server 2008

Internet Explorer 9

Internet Explorer 9 on all supported 32-bit versions of Windows Vista and Windows Server 2008

Internet Explorer 9 on all supported x64-based versions of Windows Vista and Windows Server 2008

Windows 7 and Windows Server 2008 R2 file information

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

Internet Explorer 8

Internet Explorer 8 on all supported x86-based versions of Windows 7

Internet Explorer 8 on all supported Itanium-based versions of Windows Server 2008 R2

Internet Explorer 8 on all supported x64-based versions of Windows 7 and Windows Server 2008 R2

Internet Explorer 9

Internet Explorer 9 on all supported x86-based versions of Windows 7

Internet Explorer 9 on all supported x64-based versions of Windows 7 and Windows Server 2008 R2

Internet Explorer 10

Internet Explorer 10 on all supported x86-based versions of Windows 7

Internet Explorer 10 on all supported x64-based versions of Windows 7 and Windows Server 2008 R2

Internet Explorer 11

Internet Explorer 11 on all supported x86-based versions of Windows 7

Internet Explorer 11 on all supported x64-based versions of Windows 7 and Windows Server 2008 R2

Windows 8 and Windows Server 2012 file information

Note The MANIFEST files (.manifest) and MUM files (.mum) that are installed are not listed.

Internet Explorer 10

Internet Explorer 10 on all supported x86-based versions of Windows 8

Internet Explorer 10 on all supported x64-based versions of Windows 8 and Windows Server 2012

Windows 8.1 and Windows Server 2012 R2 file information

Internet Explorer 11

Internet Explorer 11 on all supported x86-based versions of Windows 8.1

Internet Explorer 11 on all supported x64-based versions of Windows 8.1 and Windows Server 2012 R2

How to determine whether you are running a 32-bit or a 64-bit edition of Windows

If you are not sure which version of Windows that you're running or whether it is a 32-bit version or 64-bit version, open System Information (Msinfo32.exe), and review the value that is listed for System Type. To do this, follow these steps:

1. Click Start, and then click Run, or click Start Search.
2. Type msinfo32.exe, and then press Enter.
3. In System Information, review the value for System Type.
   • For 32-bit editions of Windows, the System Type value is x86-based PC.
   • For 64-bit editions of Windows, the System Type value is x64-based PC.

For more information about how to determine whether you are running a 32-bit or 64-bit edition of Windows, click the following article number to view the article in the Microsoft Knowledge Base:

Additional information about service branch

Security update 2977629 packages for Windows XP and Windows Server 2003 include Internet Explorer hotfix files and general distribution release (GDR) files. If no existing Internet Explorer files are from the hotfix environment, security update 2936068 installs the GDR files.

Hotfixes are intended to correct only the problems that are described in the Microsoft Knowledge Base articles that are associated with the hotfixes. Apply hotfixes only to systems that are experiencing these specific problems.

These hotfixes may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next service pack that contains these hotfixes. For more information about how to install the hotfixes that are included in security update 2936068, click the following article number to view the article in the Microsoft Knowledge Base:
Note In addition to installing hotfix files, review the Microsoft Knowledge Base article that is associated with the specific hotfix that you have to install. This will help you determine the registry modification that's required to enable that specific hotfix.

For more information about how to determine whether your existing Internet Explorer files are from the hotfix or from the GDR environment, click the following article number to view the article in the Microsoft Knowledge Base: