Lucene search

K
mskbMicrosoftKB3213544
HistoryJul 11, 2017 - 7:00 a.m.

Description of the security update for SharePoint Server 2016: July 11, 2017

2017-07-1107:00:00
Microsoft
support.microsoft.com
27

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0.005

Percentile

75.7%

Description of the security update for SharePoint Server 2016: July 11, 2017

Summary

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2017-8569.

Note To apply this security update, you must have the release version of SharePoint Server 2016 installed on the computer.

Improvements and fixes

This security update contains improvements for the following nonsecurity issues:

  • Improve word breaking for Thai.
    This security update contains fixes for the following nonsecurity issues:
  • The administrative backup and restore of the Category and Group Settings don’t work.
  • After you upgrade a site from SharePoint Server 2013 to SharePoint Server 2016 (such as by using the mount-spcontentdatabase cmdlet), versioning is enabled for all document libraries even if they did not have this feature previously enabled.
  • After you use the SharePoint Active Directory import option (AD import) for a User Profile service application, the Assistant property’s value is incorrectly set to the Manager property’s value.
    This security update contains fixes for the following nonsecurity issues for Project Server 2016:
  • Reliability and functionality issues when a SharePoint Server 2013 content farm is consuming a UPA service application from a SharePoint Server 2016 farm.
  • A user cannot edit summary tasks lock field in the Project Center while using Project Web App.
  • You can’t edit items in quick edit mode in a document library that has more than two pages of files when the Edit function (the link to edit items) is enabled. This issue occurs after you move to a different page of items.
  • Sub projects may become normal projects sporadically in Project 2016.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.


More Information

Security update deployment information

For deployment information about this update, see security update deployment information: July 11, 2017.

Security update replacement information

This security update doesn’t replace any previously released update.

File hash information

Package Name Package Hash SHA 1 Package Hash SHA 2
sts2016-kb3213544-fullfile-x64-glb.exe E4C394CC3EC3ABF70DD2BAB4D3E86F5586F09395 230D4BE7705C08D6640DDCDA8628C20E5C468D6C780187B81FC3AA4D101578C9

File information

For a list of the files that are provided in this update, download the file information for update KB3213544.

How to get help and support for this security update

Help for installing updates: Windows Update FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International SupportPropose a feature or provide feedback on Office Core: Office User Voice portal

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0.005

Percentile

75.7%