Lucene search

K
mskbMicrosoftKB3141806
HistoryMar 08, 2016 - 12:00 a.m.

MS16-029: Security Update for Microsoft Office to Address Remote Code Execution: March 8, 2016

2016-03-0800:00:00
Microsoft
support.microsoft.com
126

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

<html><body><p>Describes a security update that fixes vulnerabilities in Microsoft Office. The most severe of these vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file.</p><h2>Summary</h2><div>This security update resolves vulnerabilities in Microsoft Office. To learn more about the vulnerability, see <a href=“https://technet.microsoft.com/library/security/ms16-029” target=“_self”>Microsoft Security Bulletin MS16-029</a>.<span></span></div><h2>More information about this security update</h2><div>The following articles contain more information about this security update as it relates to individual product versions. These articles may contain known issue information.<br /><br /><ul><li><a href=“https://support.microsoft.com/help/2880510” target=“_self”>KB2880510 MS16-029: Description of the security update for Outlook 2007: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/2956063” target=“_self”>KB2956063 MS16-029: Description of the security update for Office 2010: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/2956110” target=“_self”>KB2956110 MS16-029: Description of the security update for 2007 Microsoft Office Suite: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3039746” target=“_self”>KB3039746 MS16-029: Description of the security update for Office 2013: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114414” target=“_self”>KB3114414 MS16-029: Description of the security update for InfoPath 2010: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114426” target=“_self”>KB3114426 MS16-029: Description of the security update for InfoPath 2007: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114690” target=“_self”>KB3114690 MS16-029: Description of the security update for Office 2016: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114812” target=“_self”>KB3114812 MS16-029: Description of the security update for Word Viewer: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114814” target=“_self”>KB3114814 MS16-029: Description of the security update for Word Automation Services on SharePoint Server 2013: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114821” target=“_self”>KB3114821 MS16-029: Description of the security update for Office Web Apps Server 2013: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114824” target=“_self”>KB3114824 MS16-029: Description of the security update for Word 2013: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114829” target=“_self”>KB3114829 MS16-029: Description of the security update for Outlook 2013: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114833” target=“_self”>KB3114833 MS16-029: Description of the security update for InfoPath 2013: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114855” target=“_self”>KB3114855 MS16-029: Description of the security update for Word 2016: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114861” target=“_self”>KB3114861 MS16-029: Description of the security update for Outlook 2016: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114866” target=“_self”>KB3114866 MS16-029: Description of the security update for Word Automation Services on SharePoint Server 2010: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114873” target=“_self”>KB3114873 MS16-029: Description of the security update for Office 2010: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114878” target=“_self”>KB3114878 MS16-029: Description of the security update for Word 2010: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114880” target=“_self”>KB3114880 MS16-029: Description of the security update for SharePoint Server 2010 Office Web Apps: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114883” target=“_self”>KB3114883 MS16-029: Description of the security update for Outlook 2010: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114900” target=“_self”>KB3114900 MS16-029: Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114901” target=“_self”>KB3114901 MS16-029: Description of the security update for Word 2007: March 8, 2016</a></li><li><a href=“https://support.microsoft.com/help/3138327” target=“_self”>KB3138327 MS16-029: Description of the security update for Office 2016 for Mac: March 15, 2016</a></li><li><a href=“https://support.microsoft.com/help/3138328” target=“_self”>KB3138328 MS16-029: Description of the security update for Office for Mac 2011: March 15, 2016</a></li><li><a href=“https://support.microsoft.com/help/3143576” target=“_self”>KB3143576 Update rollup includes a security update for Internet Explorer for Windows Embedded Compact 2013 (February 2016)</a></li></ul><h3>Nonsecurity-related fixes and improvements that are included in this security update</h3><br /><br /><ul><li>Adds the Don’t use HTML paragraph auto spacing option in Word 2013.<br /></li><li>Adds support for add-in commands to Outlook 2013.<br /></li><li>Updates startup information to better align with Cortana.<br /></li><li>Updates startup information for all international languages to better align with Cortana.<br /></li><li>Contains fixes for the following nonsecurity issues:<br /><br /><ul><li>After you add a continuous section break to a document in Word 2013, a <span>lastRenderedPageBreak</span> object is added.<br /></li><li>When you run VBA or an add-in to create multiple Word views on a document and manage the views in Word 2013, Word 2013 crashes.<br /></li><li>Assume that you have a document that has combo box content controls that are linked to custom XML parts in a document in Word 2016. After you select a value in one of these controls and then do an undo and a save operation, the type setting of some content controls is changed from combo box to rich text, and it loses the mapping to the node in the custom XML part.<br /></li><li>When you use a printer to print a document, and then you change to another printer programmatically in Word 2016, Word 2016 crashes.<br /></li><li>When you save a document as a PDF file in Word 2016, the content is broken in the PDF file.<br /></li><li>When you insert an online picture in a document in Word 2016, you receive an error message states that the picture cannot be inserted from a temporary Internet file location. Additionally, Word 2016 crashes.<br /></li><li>When you scroll HTML email messages in Outlook 2016 or Word 2016, Outlook 2016 or Word 2016 crashes.<br /></li><li>It takes a long time to update a content control in the XML Mapping control in Word 2016. This update improves performance for content controls in Word 2016. <br /></li><li>If the default input language is set to a language that is written by using Cyrillic characters, some keyboard shortcuts (for example, Ctrl+C and Ctrl+V) don’t work in Word 2016.<br /></li><li>The <span>WindowBeforeRightClick</span> event doesn’t fire when you right-click in a document in Word 2016.<br /></li><li>When you try to insert an HTML file as an object in a Microsoft Word 2016 document, you receive the following error message:<br /><div>The program used to create this object is html file. That program is either not installed on your computer or it is not responding. To edit this object, install html file or ensure that any dialog boxes in html file are closed.</div></li><li>If you step through code (for example, by using the <span>Step Into</span> function) in a document in Word 2016, Word 2016 crashes.<br /></li><li>After you install updates for Word 2016, the Normal template (Normal.dotm) is renamed to Normal.dotm.old and a new Normal.dotm is created.<br /></li><li>There’s insufficient memory or disk space to repaginate or print document in Word 2016.<br /></li><li>When you use <span>ctx.trackedObjects.add()</span> and you unload the apps without manually cleaning up the objects, Word 2016 automatically gracefully cleans up those objects before it unloads the apps.<br /></li><li>The <strong>Do Not Forward</strong> business bar information string is cropped and is not fully displayed in some non-English versions of Outlook 2016.<br /></li><li>A Universal Naming Convention (UNC) path that contains some full-width characters isn’t resolved as a hyperlink in Word 2016.<br /></li><li>After you add a continuous section break to a document in Word 2016, a <span>lastRenderedPageBreak</span> object is added.<br /></li><li>If you use Visual Studio Tools for Office (VSTO) tools to run some code in a document in Word 2016, a user selection is lost in the document.<br /></li><li>The <strong>Don’t use HTML</strong> paragraph autospacing compatibility option is unavailable to convert files in Word 2016.<br /></li><li>When you open an Outlook 2010 instance that has more than 30 calendars in a calendar view in a Citrix environment, Outlook 2010 crashes. To fix this issue, see KB3114809 for more information.<br /></li><li>Appointments that start and end on different days are displayed as multiple meetings in the Month view in Outlook 2010.<br /></li><li>When you view certain meeting cancelation email messages in the reading pane in Outlook 2013, Outlook 2013 crashes.<br /></li><li>When you use a mouse to open a new all-day appointment in Outlook 2013, Outlook 2013 crashes.<br /></li><li>When you try to set an account in Outlook 2016, Outlook 2016 takes longer than Outlook 2013 to collect autodiscover data for the account.<br /></li><li>When you scroll through some items in a message list in Outlook 2016, Window-Eyes stops the screen reader from working for Outlook 2016.<br /></li></ul></li></ul></div><h2>More Information</h2><div><div><div><div><span><span></span></span><span><span>Security update deployment information</span></span></div><div><span><div><h4>Microsoft Office 2007 (all editions) and other software</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office 2007 Service Pack 3:<br /><span>otkruntimertl2007-kb2956110-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft InfoPath 2007 Service Pack 3:<br /><span>infopath2007-kb3114426-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Outlook 2007 Service Pack 3:<br /><span>outlook2007-kb2880510-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2007 Service Pack 3:<br /><span>word2007-kb3114901-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office Compatibility Pack:<br /><span>wordconv2007-kb3114900-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word Viewer:<br /><span>office-kb3114812-fullfile-enu.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/912203” target=“_self”>Microsoft Knowledge Base article 912203</a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart, and a message appears that advises you to restart.<br /><br />To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/help/887012” target=“_self”>Microsoft Knowledge Base article 887012</a>.</td></tr><tr><td><span>Removal information</span></td><td>Use <strong>Add or Remove Programs</strong> item in <strong>Control Panel</strong>.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/2880510” target=“_self”>Microsoft Knowledge Base article 2880510</a><br />See <a href=“https://support.microsoft.com/help/2956110” target=“_self”>Microsoft Knowledge Base article 2956110</a><br />See <a href=“https://support.microsoft.com/help/3114426” target=“_self”>Microsoft Knowledge Base article 3114426</a><br />See <a href=“https://support.microsoft.com/help/3114812” target=“_self”>Microsoft Knowledge Base article 3114812</a><br />See <a href=“https://support.microsoft.com/help/3114900” target=“_self”>Microsoft Knowledge Base article 3114900</a><br />See <a href=“https://support.microsoft.com/help/3114901” target=“_self”>Microsoft Knowledge Base article 3114901</a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><h4>Microsoft Office 2010 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office 2010 Service Pack 2 (32-bit editions):<span> otkruntimertl2010-kb2956063-fullfile-x86-glb.exe</span><span><br /><span>kb24286772010-kb3114873-fullfile-x86-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Office 2010 Service Pack 2 (64-bit editions) <br /><span>kb24286772010-kb3114873-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft InfoPath 2010 Service Pack 2 (32-bit editions)<br /><span>infopath2010-kb3114414-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft InfoPath 2010 Service Pack 2 (64-bit editions)<br /><span>infopath2010-kb3114414-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Outlook 2010 Service Pack 2 (32-bit editions)<br /><span>outlookloc2010-kb3114883-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Outlook 2010 Service Pack 2 (64-bit editions)<br /><span>outlookloc2010-kb3114883-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2010 Service Pack 2 (32-bit editions)<br /><span>word2010-kb3114878-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2010 Service Pack 2 (64-bit editions)<br /><span>word2010-kb3114878-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/912203” target=“_self”>Microsoft Knowledge Base article 912203</a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart, and a message appears that advises you to restart.<br /><br />To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/help/887012” target=“_self”>Microsoft Knowledge Base article 887012</a>.</td></tr><tr><td><span>Removal information</span></td><td>Use <strong>Add or Remove Programs</strong> item in <strong>Control Panel</strong>.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/2956063” target=“_self”>Microsoft Knowledge Base article 2956063</a><br />See <a href=“https://support.microsoft.com/help/3114414” target=“_self”>Microsoft Knowledge Base article 3114414</a><br />See <a href=“https://support.microsoft.com/help/3114873” target=“_self”>Microsoft Knowledge Base article 3114873</a><br />See <a href=“https://support.microsoft.com/help/3114878” target=“_self”>Microsoft Knowledge Base article 3114878</a><br />See <a href=“https://support.microsoft.com/help/3114883” target=“_self”>Microsoft Knowledge Base article 3114883</a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><h4>Microsoft Office 2013 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For supported editions of Microsoft Office 2013 (32-bit editions):<br /><span>otkruntimertl2013-kb3039746-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For supported editions of Microsoft InfoPath 2013 (32-bit editions)<br /><span>infopath2013-kb3114833-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For supported editions of Microsoft InfoPath 2013 (64-bit editions)<br /><span>infopath2013-kb3114833-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For supported editions of Microsoft Outlook 2013 (32-bit editions)<br /><span>outlook2013-kb3114829-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For supported editions of Microsoft Outlook 2013 (64-bit editions)<br /><span>outlook2013-kb3114829-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For supported editions of Microsoft Word 2013 (32-bit editions)<br /><span>word2013-kb3114824-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For supported editions of Microsoft Word 2013 (64-bit editions)<br /><span>word2013-kb3114824-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/912203” target=“_self”>Microsoft Knowledge Base article 912203</a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart, and a message appears that advises you to restart.<br /><br />To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/help/887012” target=“_self”>Microsoft Knowledge Base article 887012</a>.</td></tr><tr><td><span>Removal information</span></td><td>Use <strong>Add or Remove Programs</strong> item in <strong>Control Panel</strong>.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3039746” target=“_self”>Microsoft Knowledge Base article 3039746</a><br />See <a href=“https://support.microsoft.com/help/3114824” target=“_self”>Microsoft Knowledge Base article 3114824</a><br />See <a href=“https://support.microsoft.com/help/3114829” target=“_self”>Microsoft Knowledge Base article 3114829</a><br />See <a href=“https://support.microsoft.com/help/3114833” target=“_self”>Microsoft Knowledge Base article 3114833</a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><h4>Microsoft Office 2013 RT (all editions)</h4><div><table><tr><td><span>Deployment</span></td><td>The 3114829 update for Microsoft Outlook 2013 RT is available via <a href=“http://go.microsoft.com/fwlink/?linkid=21130” target=“_self”>Windows Update</a>.</td></tr><tr><td></td><td>The 3114824 update for Microsoft Word 2013 RT is available via <a href=“http://go.microsoft.com/fwlink/?linkid=21130” target=“_self”>Windows Update</a>.</td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart, and a message appears that advises you to restart.<br /><br />To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/help/887012” target=“_self”>Microsoft Knowledge Base article 887012</a>.</td></tr><tr><td><span>Removal information</span></td><td>Click <strong>Control Panel</strong>, click <strong>System and Security</strong>, click <strong>Windows Update</strong>, and then under See also, click <strong>Installed updates</strong> and select from the list of updates.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3114824” target=“_self”>Microsoft Knowledge Base article 3114824</a><br />See <a href=“https://support.microsoft.com/help/3114829” target=“_self”>Microsoft Knowledge Base article 3114829</a></td></tr></table></div><h4>Microsoft Office 2016 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office 2016 (32-bit edition):<br /><span>otkruntimertl2016-kb3114690-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Outlook 2016 (32-bit edition):<br /><span>outlook2016-kb3114861-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Outlook 2016 (64-bit edition):<br /><span>outlook2016-kb3114861-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2016 (32-bit edition):<br /><span>word2016-kb3114855-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2016 (64-bit edition):<br /><span>word2016-kb3114855-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/912203” target=“_self”>Microsoft Knowledge Base article 912203</a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart, and a message appears that advises you to restart.<br /><br />To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/help/887012” target=“_self”>Microsoft Knowledge Base article 887012</a>.</td></tr><tr><td><span>Removal information</span></td><td>Use <strong>Add or Remove Programs</strong> item in <strong>Control Panel</strong>.</td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/3114690” target=“_self”>Microsoft Knowledge Base article 3114690</a><br />See <a href=“https://support.microsoft.com/help/3114861” target=“_self”>Microsoft Knowledge Base article 3114861</a><br />See <a href=“https://support.microsoft.com/help/3114855” target=“_self”>Microsoft Knowledge Base article 3114855</a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><h4>Microsoft Office Web Apps 2010 (all versions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office Web Apps 2010 Service Pack 2:<br /><span>wac2010-kb3114880-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/912203” target=“_self”>Microsoft Knowledge Base Article 912203</a></td></tr><tr><td><span>Restart requirement</span></td><td>n some cases, this update does not require a restart. If the required files are being used, this update will require a restart, and a message appears that advises you to restart.<br /><br />To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/help/887012” target=“_self”>Microsoft Knowledge Base Article 887012</a>.</td></tr><tr><td><span>Removal information</span></td><td>This security update cannot be removed.</td></tr><tr><td><span>File Information</span></td><td>See <a href=“https://support.microsoft.com/help/3114880” target=“_self”>Microsoft Knowledge Base Article 3114880</a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><h4>Microsoft Office Web Apps 2013 (all versions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For all supported editions of Microsoft Office Web Apps Server 2013 Service Pack 2:<br /><span>wacserver2013-kb3114821-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/912203” target=“_self”>Microsoft Knowledge Base Article 912203</a></td></tr><tr><td><span>Restart requirement</span></td><td>n some cases, this update does not require a restart. If the required files are being used, this update will require a restart, and a message appears that advises you to restart.<br /><br />To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/help/887012” target=“_self”>Microsoft Knowledge Base Article 887012</a>.</td></tr><tr><td><span>Removal information</span></td><td>This security update cannot be removed.</td></tr><tr><td><span>File Information</span></td><td>See <a href=“https://support.microsoft.com/help/3114821” target=“_self”>Microsoft Knowledge Base Article 3114821</a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><h4>Microsoft SharePoint Server 2010 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Word Automation Services on supported editions of Microsoft SharePoint Server 2010 Service Pack 2:<br /><span>wdsrv2010-kb3114866-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/912203” target=“_self”>Microsoft Knowledge Base Article 912203</a></td></tr><tr><td><span>Restart requirement</span></td><td>After you install this security update on all SharePoint servers, you must run the PSconfig tool to complete the installation process.<br /><br />You may have to restart the computer after you install this security update.<br /><br />In some cases, this update does not require a restart. If the required files are being used, this update will require a restart, and a message appears that advises you to restart.<br /><br />To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012” target=“_self”>Why you may be prompted to restart your computer after you install a security update on a Windows-based computer</a>.</td></tr><tr><td><span>Removal information</span></td><td>This security update cannot be removed.</td></tr><tr><td><span>File Information</span></td><td>See <a href=“https://support.microsoft.com/help/3114866” target=“_self”>Microsoft Knowledge Base Article 3114866</a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><h4>Microsoft SharePoint Server 2013 (all editions)</h4><span>Reference table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Word Automation Services on supported editions of Microsoft SharePoint Server 2013:<br /><span>wdsrvloc2013-kb3114814-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/912203” target=“_self”>Microsoft Knowledge Base Article 912203</a></td></tr><tr><td><span>Restart requirement</span></td><td>After you install this security update on all SharePoint servers, you must run the PSconfig tool to complete the installation process.<br /><br />You may have to restart the computer after you install this security update.<br /><br />In some cases, this update does not require a restart. If the required files are being used, this update will require a restart, and a message appears that advises you to restart.<br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012” target=“_self”>Why you may be prompted to restart your computer after you install a security update on a Windows-based computer</a>.</td></tr><tr><td><span>Removal information</span></td><td>This security update cannot be removed.</td></tr><tr><td><span>File Information</span></td><td>See <a href=“https://support.microsoft.com/help/3114814” target=“_self”>Microsoft Knowledge Base Article 3114814</a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><h4>Office for Mac 2011</h4><div><h5>Prerequisites</h5><ul><li>You must be running Mac OS X version 10.5.8 or a later version on an Intel processor.</li><li>Mac OS X user accounts must have administrator credentials to install this security update.</li></ul><h5>Installing the update</h5>Download and install the appropriate language version of the Microsoft Office for Mac 2011 14.6.2 Update from the <a href=“https://www.microsoft.com/en-us/download/details.aspx?id=49874” target=“_self”>Microsoft Download Center</a>. Then, follow these steps:<br /><ol><li>Exit any applications that are running. This includes virus-protection applications and all Microsoft Office applications because they could interfere with the installation.</li><li>Open the Microsoft Office for Mac 2011 14.6.2 Update volume on your desktop. This step might have been performed for you.</li><li>To start the update process, in the Microsoft Office for Mac 2011 14.6.2 Update volume window, double-click the Microsoft Office for Mac 2011 14.6.2 Update application, and then follow the instructions.</li><li>When the installation is complete, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see the “Verifying update installation” section. To remove the update installer, drag the Microsoft Office for Mac 2011 14.6.2 Update volume to the Trash, and then drag the file that you downloaded to the Trash.</li></ol><h5>Verifying update installation</h5>To verify that a security update is installed on an affected system, follow these steps:<br /><ol><li>In <span>Finder</span>, locate the <span>Application Folder</span> (Microsoft Office 2011).</li><li>Select <span>Word</span>, <span>Excel</span>, <span>PowerPoint</span>, or <span>Outlook</span>, and start the application.</li><li>On the application menu, click <span>About <<strong>Application_Name</strong>></span> (where <<strong>Application_Name</strong>> is a placeholder that represents Word, Excel, PowerPoint, or Outlook).</li></ol>If the<strong> Latest Installed Update Version </strong>number is <span>14.6.2</span>, the update was successfully installed.<br /><br /><h5>Restart requirement</h5>This update doesn’t require you to restart your computer.<br /><br /><h5>Removing the update</h5>This security update cannot be uninstalled.<br /><br /><h5>More information</h5>If you have technical questions or problems with downloading or using this update, see <a href=“https://www.microsoft.com/mac/support” target=“_self”>Microsoft for Mac Support</a> to learn about the support options that are available to you.<br /><h4>Office 2016 for Mac</h4><div><h5>Prerequisites</h5><ul><li>Mac OS X Yosemite 10.10 or a later version on an Intel processor.</li><li>A valid Microsoft Office 365 subscription.</li></ul><h5>Installing the update</h5>Download and install the appropriate language version of the Microsoft Office 2016 for Mac 15.20.0 Update from the <a href=“https://www.microsoft.com/download/details.aspx?familyid=6c1741ba-696f-4fd6-9fe3-aca2b2ecc64e” target=“_self”>Microsoft Download Center</a>. Then, follow these steps:<br /><ol><li>Exit any applications that are running. This includes virus-protection applications and all Microsoft Office applications because they could interfere with the installation.</li><li>Open the Microsoft Office 2016 for Mac 15.20.0 Update volume on your desktop. This step might have been performed for you.</li><li>To start the update process, in the Microsoft Office 2016 for Mac 15.20.0 Update volume window, double-click the Microsoft Office 2016 for Mac 15.20.0 Update application, and follow the instructions.</li><li>When the installation finishes successfully, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see the “Verifying update installation” section. To remove the update installer, first drag the Microsoft Office 2016 for Mac 15.20.0 Update volume to the Trash, and then drag the file that you downloaded to the Trash.</li></ol><h5>Verifying update installation</h5>To verify that a security update is installed on an affected system, follow these steps:<br /><ol><li>In <span>Finder</span>, locate the <span>Application Folder</span> (Microsoft Office 2016).</li><li>Select <span>Word</span>, <span>Excel</span>, <span>PowerPoint</span>, or <span>Outlook</span>, and start the application.</li><li>On the application menu, click <strong>About </strong><strong><strong>Application_Name</strong></strong> (where <strong>Application_Name</strong> is Word, Excel, PowerPoint or Outlook).</li></ol>If the Latest Installed Update Version number is <span>15.20.0</span>, the update was successfully installed.<br /><br /><h5>Restart requirement</h5>This update doesn’t require you to restart your computer.<br /><br /><h5>Removing the update</h5>This security update cannot be uninstalled.<br /><br /><h5>More information</h5>If you have technical questions or problems with downloading or using this update, see <a href=“https://www.microsoft.com/mac/support” target=“_self”>Microsoft for Mac Support</a> to learn about the support options that are available to you.<br /></div><br /></div></div></span></div></div></div><div><div><div><span><span></span></span><span><span>How to get help and support for this security update</span></span></div><div><span><div>Help for installing updates: <a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals: <a href=“https://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br />Help for protecting your Windows-based computer from viruses and malware: <a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country: <a href target=“_self”>International Support</a></div><br /></span></div></div></div><br /></div></body></html>

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C