Description of the security update for Excel 2010: April 10, 2018

Summary

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the following TechNet articles:

• Microsoft Common Vulnerabilities and Exposures CVE-2018-0920
• Microsoft Common Vulnerabilities and Exposures CVE-2018-1011
• Microsoft Common Vulnerabilities and Exposures CVE-2018-1027
• Microsoft Common Vulnerabilities and Exposures CVE-2018-1029
  Note To apply this security update, you must have the release version of Service Pack 2 for Office 2010 installed on the computer.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer (.msi)-based edition of Office 2010. It doesn’t apply to the Office 2010 Click-to-Run editions, such as Microsoft Office 365 Home. (Determining your Office version)

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

• Download security update 4018362 for the 32-bit version of Excel 2010
• Download security update 4018362 for the 64-bit version of Excel 2010

More Information

Security update deployment information

For deployment information about this update, see security update deployment information: April 10, 2018.

Security update replacement information

This security update replaces previously released security update 4011675.

File hash information

Package name	Package hash SHA 1	Package hash SHA 2
excel2010-kb4018362-fullfile-x86-glb.exe	C856B89CB5B32C4E7703F0B57F26208C0C122DB5	61900ADD202E6C7B3FE6BD6D296A2FBCD461006F83AECB133F422DA86A3082BE
excel2010-kb4018362-fullfile-x64-glb.exe	5A211FBDB2E368BA969CA56E546C49CF0DCA6483	B6A09DCD7C95FA047EA338CC0EB9C0E1AE106E42A9EAB2E5FFB35CD1CD905B5A

File informationThe English version of this security update has the file attributes (or later file attributes) that are listed in the following table.

For all supported x86-based versions of Excel 2010

File identifier	File name	File version	File size	Date	Time
excel.exe	excel.exe	14.0.7197.5000	20,414,632	25-Mar-2018	11:07
excel.man	excel.exe.manifest		1,194	05-Nov-2009	11:00
xl12cnv.exe	excelcnv.exe	14.0.7197.5000	17,852,592	17-Mar-2018	09:33
xlcall32.dll	xlcall32.dll	14.0.7162.5000	10,432	13-Oct-2015	06:52
xlicons.exe	xlicons.exe	14.0.7120.5000	1,480,360	05-Mar-2014	06:06

For all supported x64-based versions of Excel 2010

File identifier	File name	File version	File size	Date	Time
excel.exe	excel.exe	14.0.7197.5000	27,671,208	25-Mar-2018	11:09
excel.man	excel.exe.manifest		1,196	05-Nov-2009	11:23
xl12cnv.exe	excelcnv.exe	14.0.7197.5000	25,064,624	17-Mar-2018	09:39
xlcall32.dll	xlcall32.dll	14.0.7162.5000	10,944	13-Oct-2015	07:00
xlicons.exe	xlicons.exe	14.0.7120.5000	1,480,360	05-Mar-2014	06:06

How to get help and support for this security update

Help for installing updates: Support for Microsoft UpdateSecurity solutions for IT professionals: TechNet Security Troubleshooting and SupportHelp for protecting your Windows-based computer from viruses and malware: Virus Solution and Security CenterLocal support according to your country: International SupportPropose a feature or provide feedback on Office: Office User Voice portal