Lucene search

K
mskbMicrosoftKB4462176
HistoryOct 08, 2019 - 7:00 a.m.

Description of the security update for SharePoint Server 2010: October 8, 2019

2019-10-0807:00:00
Microsoft
support.microsoft.com
17

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.047 Low

EPSS

Percentile

92.5%

Description of the security update for SharePoint Server 2010: October 8, 2019

Summary

This security update resolves a remote code execution vulnerability that exists in Microsoft Excel software when the software fails to correctly handle objects in memory. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2019-1331.

Note To apply this security update, you must have the release version of Service Pack 2 for Microsoft SharePoint Server 2010 installed on the computer.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the standalone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More information

Security update deployment information

For deployment information about this update, see security update deployment information: October 8, 2019.

Security update replacement information

This security update replaces previously released security update 4461569.

File hash information

File name SHA1 hash SHA256 hash
xlsrv2010-kb4462176-fullfile-x64-glb.exe 1F46EE3C7C6EC3FA463DF450CACCAB89BF0341C7 A08C4B19AEE046534F3AC4E7DDF5F76960599F1D14A436A607EAE21E557F1E7E

File informationThe English (United States) version of this software update installs files that have the attributes that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

__

For all supported x64-based versions of SharePoint Server 2010

File identifier File name File version File size Date Time
cuixas.js cuixas.js 263,367 07-Jan-2014 03:02
dynamicgridcontent.asmx dynamicgridcontent.asmx dynamicgridcontent.json 313 12-Feb-2008
ewabrowsercompat.js ewabrowsercompat.js 6,565 05-Nov-2009 11:47
ewachart.png 91,313 08-Dec-2010 04:43
ewacmdui.xml ewacmdui.xml 116,740 08-Dec-2010 08:28
ewainternalwebservice.asmx ewainternalwebservice.asmx ewainternalwebservice.json 322 12-Feb-2008
ewamenu.js ewamenu.js 41,074 13-Aug-2015 02:48
ewamoss.js ewamoss.js 786,371 15-Mar-2017 03:05
ewanewwpctrl.ascx excelwebrenderernewwebpartcontrol.ascx 2,202 15-Jun-2009 01:07
ewaparameterstaskpane.ascx ewaparameterstaskpane.ascx 1,511 28-Sep-2009 09:29
ewareadmodetoolbar.ascx ewareadmodetoolbar.ascx 3,963 08-Dec-2010 08:28
ewastringshandler.ashx ewastringshandler.ashx 317 22-Nov-2012 08:59
ewrdynamicimageprovider.aspx dynamicimageprovider.aspx 433 02-Jun-2009 11:56
ewrdynamicslicerprovider.aspx dynamicslicerprovider.aspx 529 02-Jun-2009 11:56
ewrtreeview.js ewrtreeview.js 19,012 15-Jun-2009 01:08
ewrxlfilehandler.aspx xlfilehandler.aspx 421 02-Jun-2009 11:56
ewrxlviewer.aspx xlviewer.aspx 9,316 08-Dec-2010 08:32
ewrxlviewerinternal.aspx xlviewerinternal.aspx 13,540 08-Dec-2010 08:32
excelrest.aspx excelrest.aspx 923 20-Mar-2009 02:02
excelservercreateapplication.aspx excelservercreateapplication.aspx 5,364 04-Sep-2009 05:03
excelserversafedataprovider.aspx excelserversafedataprovider.aspx 6,188 20-Sep-2008 08:29
excelserversafedataproviders.aspx excelserversafedataproviders.aspx 5,219 20-Sep-2008 08:29
excelserversettings.aspx excelserversettings.aspx 10,724 21-Apr-2009 11:42
excelservertrusteddcl.aspx excelservertrusteddcl.aspx 5,753 20-Jan-2009 03:23
excelservertrusteddcls.aspx excelservertrusteddcls.aspx 5,196 20-Sep-2008 08:30
excelservertrustedlocation.aspx excelservertrustedlocation.aspx 11,928 04-Sep-2009 05:03
excelservertrustedlocations.aspx excelservertrustedlocations.aspx 5,213 20-Sep-2008 08:30
excelserveruserdefinedfunction.aspx excelserveruserdefinedfunction.aspx 6,048 20-Jan-2009 03:24
excelserveruserdefinedfunctions.aspx excelserveruserdefinedfunctions.aspx 5,229 20-Sep-2008 08:30
excelservicedisco.aspx excelservicedisco.aspx 1,401 21-Feb-2008 11:53
excelservicesadmin.aspx excelservicesadmin.aspx 5,861 20-Jan-2009 03:24
excelservicewsdl.aspx excelservicewsdl.aspx 58,456 15-Jun-2009 01:06
excelwebrenderer.ascx excelwebrenderer.ascx 4,877 08-Dec-2010 08:28
inputformexcelserversetting.ascx inputformexcelserversetting.ascx 2,777 21-Feb-2008 11:42
mewadynamicimageprovider.aspx dynamicimageprovider.aspx 433 02-Jun-2009 11:56
microsoft.office.excel.webui.internal.dll microsoft.office.excel.webui.internal.dll 14.0.7006.1000 641,640 22-Nov-2012 09:18
microsoft.office.excel.webui.mobile.dll microsoft.office.excel.webui.mobile.dll 14.0.7160.5000 114,760 16-Sep-2015 12:15
slicerrenderer.ascx slicerrenderercontrol.ascx 7,687 05-Nov-2009 11:44
xlsrv.dll xlsrv.dll 14.0.7239.5000 14,674,576 21-Sep-2019 04:00
xlsrvintl.dll.1033 xlsrvintl.dll 14.0.7239.5000 115,376 10-Sep-2019 10:28

How to get help and support for this security updateHelp for installing updates: Protect yourself online

Help for protecting your Windows-based computer from viruses and malware: Microsoft Security

Local support according to your country: International Support

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.047 Low

EPSS

Percentile

92.5%