Lucene search

K
mskbMicrosoftKB3128029
HistoryDec 13, 2016 - 8:00 a.m.

MS16-148: Description of the security update for Excel Services on SharePoint Server 2010: December 13, 2016

2016-12-1308:00:00
Microsoft
support.microsoft.com
25

7.7 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.6%

MS16-148: Description of the security update for Excel Services on SharePoint Server 2010: December 13, 2016

Summary

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-148.

Note To apply this security update, you must have the release version of Service Pack 2 for Microsoft SharePoint Server 2010 installed on the computer.

For a complete list of affected versions of Microsoft Office software, see Microsoft Knowledge Base article 3204068.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More Information

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base article 3204068.

Security update replacement information

This security update replaces previously released security update 3118381.

File hash information

Package name Package hash SHA 1 Package hash SHA 2
xlsrv2010-kb3128029-fullfile-x64-glb.exe 58037DD3A5CBBCFE8813539F1E8AB0AA7068FA44 493886E1775228C7385B0FEE182D1541A718901FB8BB5A17008D5E6248E80883

__

File information

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table.

For all supported x64-based versions of Excel Services on SharePoint Server 2010File identifier File name File version File size Date Time
cuixas.js cuixas.js 263,367 31-Jan-2014 08:14
dynamicgridcontent.asmx dynamicgridcontent.asmx dynamicgridcontent.json 313 04-Sep-2009
ewabrowsercompat.js ewabrowsercompat.js 6,565 06-Nov-2009 12:47
ewachart.png 91,313 08-Dec-2010 05:43
ewacmdui.xml ewacmdui.xml 116,740 08-Dec-2010 09:28
ewainternalwebservice.asmx ewainternalwebservice.asmx ewainternalwebservice.json 322 04-Sep-2009
ewamenu.js ewamenu.js 41,074 13-Aug-2015 03:48
ewamoss.js ewamoss.js 786,371 10-Jan-2013 12:36
ewanewwpctrl.ascx excelwebrenderernewwebpartcontrol.ascx 2,202 12-Feb-2013 11:38
ewaparameterstaskpane.ascx ewaparameterstaskpane.ascx 1,511 12-Feb-2013 11:38
ewareadmodetoolbar.ascx ewareadmodetoolbar.ascx 3,963 12-Feb-2013 11:38
ewastringshandler.ashx ewastringshandler.ashx 317 22-Nov-2012 09:59
ewrdynamicimageprovider.aspx dynamicimageprovider.aspx 433 12-Feb-2013 11:38
ewrdynamicslicerprovider.aspx dynamicslicerprovider.aspx 529 12-Feb-2013 11:38
ewrtreeview.js ewrtreeview.js 19,012 04-Sep-2009 12:43
ewrxlfilehandler.aspx xlfilehandler.aspx 421 12-Feb-2013 11:38
ewrxlviewer.aspx xlviewer.aspx 9,316 12-Feb-2013 11:39
ewrxlviewerinternal.aspx xlviewerinternal.aspx 13,540 12-Feb-2013 11:39
excelrest.aspx excelrest.aspx 923 12-Feb-2013 11:39
excelservercreateapplication.aspx excelservercreateapplication.aspx 5,364 12-Feb-2013 11:22
excelserversafedataprovider.aspx excelserversafedataprovider.aspx 6,188 12-Feb-2013 11:22
excelserversafedataproviders.aspx excelserversafedataproviders.aspx 5,219 12-Feb-2013 11:22
excelserversettings.aspx excelserversettings.aspx 10,724 12-Feb-2013 11:22
excelservertrusteddcl.aspx excelservertrusteddcl.aspx 5,753 12-Feb-2013 11:22
excelservertrusteddcls.aspx excelservertrusteddcls.aspx 5,196 12-Feb-2013 11:22
excelservertrustedlocation.aspx excelservertrustedlocation.aspx 11,928 12-Feb-2013 11:22
excelservertrustedlocations.aspx excelservertrustedlocations.aspx 5,213 12-Feb-2013 11:22
excelserveruserdefinedfunction.aspx excelserveruserdefinedfunction.aspx 6,048 12-Feb-2013 11:22
excelserveruserdefinedfunctions.aspx excelserveruserdefinedfunctions.aspx 5,229 12-Feb-2013 11:22
excelservicedisco.aspx excelservicedisco.aspx 1,401 12-Feb-2013 11:37
excelservicesadmin.aspx excelservicesadmin.aspx 5,861 12-Feb-2013 11:22
excelservicewsdl.aspx excelservicewsdl.aspx 58,456 12-Feb-2013 11:37
excelwebrenderer.ascx excelwebrenderer.ascx 4,877 12-Feb-2013 11:38
inputformexcelserversetting.ascx inputformexcelserversetting.ascx 2,777 12-Feb-2013 11:22
mewadynamicimageprovider.aspx dynamicimageprovider.aspx 433 12-Feb-2013 11:38
microsoft.office.excel.webui.internal.dll microsoft.office.excel.webui.internal.dll 14.0.7006.1000 641,640 22-Nov-2012 10:18
microsoft.office.excel.webui.mobile.dll microsoft.office.excel.webui.mobile.dll 14.0.7160.5000 114,760 16-Sep-2015 01:15
slicerrenderer.ascx slicerrenderercontrol.ascx 7,687 12-Feb-2013 11:38
xlsrv.dll xlsrv.dll 14.0.7177.5000 14,664,424 17-Nov-2016 12:29
xlsrvintl.dll.1033 xlsrvintl.dll 14.0.7177.5000 115,456 16-Nov-2016 07:17

__

How to get help and support for this security update

Help for installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware:
Virus Solution and Security Center

Local support according to your country: International Support

7.7 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.6%