Description of the security update for Word 2010: January 9, 2018

Summary

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerabilities, go to the following Common Vulnerabilities and Exposures (CVE).

• CVE-2018-0802
• CVE-2018-0793
• CVE-2018-0794
• CVE-2018-0797
• CVE-2018-0798
  Note To apply this security update, you must have the release version of Service Pack 2 for Office 2010 installed on the computer.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer (.msi)-based edition of Office 2010. It doesn’t apply to the Office 2010 Click-to-Run editions, such as Microsoft Office 365 Home (see Determining your Office version) .

Improvements and fixes

This security update contains improvements for the following nonsecurity issue:

• This update improves Office application startup performance by skipping unnecessary scanning of Microsoft Word documents that are local and not encrypted.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

• Download the security update KB4011659 for the 32-bit version of Word 2010
• Download the security update KB4011659 for the 64-bit version of Word 2010

More Information

Security update deployment information

For deployment information about this update, see security update deployment information: January 9, 2018.

Security update replacement information

This security update replaces previously released security update KB 4011614.

File hash information

Package Name	Package Hash SHA 1	Package Hash SHA 2
word2010-kb4011659-fullfile-x64-glb.exe	CB54D3573E9EF487D9D13037A01A784A6102CE6C	A3003525A77FB852AD657FF7EA1FA4E8373788843AF9BAE159E50CA8F030D0AA
word2010-kb4011659-fullfile-x86-glb.exe	EFCE9AB107923B337A65A818B2BA2CCDB9D2A376	C9404446AC423411E05837AFB228EF76BDD4CEBF2FFCB49B73273ACCE0C1287E

File information

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight-saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

For all supported x86-based versions of Word 2010

File identifier	File name	File version	File size	Date	Time
msword.olb	msword.olb	14.0.7162.5000	902,304	14-Oct-2015	05:59
winword.exe	winword.exe	14.0.7192.5000	1,432,224	16-Dec-2017	09:00
wordicon.exe	wordicon.exe	14.0.7120.5000	1,859,240	05-Mar-2014	07:06
wrd12cnv.dll	wordcnv.dll	14.0.7192.5000	5,483,688	16-Dec-2017	09:26
wwlib.dll	wwlib.dll	14.0.7192.5000	19,301,024	16-Dec-2017	09:00

For all supported x64-based versions of Word 2010

File identifier	File name	File version	File size	Date	Time
msword.olb	msword.olb	14.0.7162.5000	902,304	14-Oct-2015	06:03
winword.exe	winword.exe	14.0.7192.5000	1,433,248	16-Dec-2017	09:00
wordicon.exe	wordicon.exe	14.0.7120.5000	1,859,240	05-Mar-2014	07:06
wrd12cnv.dll	wordcnv.dll	14.0.7192.5000	6,839,976	16-Dec-2017	09:25
wwlib.dll	wwlib.dll	14.0.7192.5000	24,535,200	16-Dec-2017	09:00

How to get help and support for this security update

Help for installing updates: Windows Update FAQ

Security solutions for IT professionals: Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International SupportPropose a feature or provide feedback on Office Core: Office User Voice portal