Lucene search

K
mskbMicrosoftKB4484159
HistoryNov 12, 2019 - 8:00 a.m.

Description of the security update for SharePoint Server 2010: November 12, 2019

2019-11-1208:00:00
Microsoft
support.microsoft.com
34
sharepoint server 2010
security update
microsoft excel
information disclosure
vulnerability
microsoft update
microsoft download center
file hash
deployment information
security update replacement

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.003

Percentile

69.8%

Description of the security update for SharePoint Server 2010: November 12, 2019

Summary

This security update resolves an information disclosure vulnerability that exists if Microsoft Excel incorrectly discloses the contents of its memory. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2019-1446.

Note To apply this security update, you must have the release version of Service Pack 2 for Microsoft SharePoint Server 2010 installed on the computer.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the standalone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

  • Download iconDownload security update 4484159 for the 64-bit version of SharePoint Server 2010

More information

Security update deployment information

For deployment information about this update, see security update deployment information: November 12, 2019.

Security update replacement information

This security update replaces previously released security update 4462176.

File hash information

File name SHA1 hash SHA256 hash
xlsrv2010-kb4484159-fullfile-x64-glb.exe 4FD55560B3DF2099DFA3AF1EAEA8826F98E51A0E BD53A1391E8259961CBE96FA55D4A13BED9098B4EE324DA10DC7C45137BE99D5

File informationThe English (United States) version of this software update installs files that have the attributes that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

__

For all supported x64-based versions of SharePoint Server 2010

File identifier File name File version File size Date Time
cuixas.js cuixas.js 263,367 11-Sep-2018 07:02
dynamicgridcontent.asmx dynamicgridcontent.asmx dynamicgridcontent.json 313 07-Sep-2018
ewabrowsercompat.js ewabrowsercompat.js 6,565 07-Sep-2018 11:38
ewachart.png 91,313 07-Sep-2018 04:14
ewacmdui.xml ewacmdui.xml 116,740 07-Sep-2018 11:38
ewainternalwebservice.asmx ewainternalwebservice.asmx ewainternalwebservice.json 322 07-Sep-2018
ewamenu.js ewamenu.js 41,074 11-Sep-2018 02:01
ewamoss.js ewamoss.js 786,371 11-Sep-2018 02:01
ewanewwpctrl.ascx excelwebrenderernewwebpartcontrol.ascx 2,202 07-Sep-2018 11:38
ewaparameterstaskpane.ascx ewaparameterstaskpane.ascx 1,511 07-Sep-2018 11:38
ewareadmodetoolbar.ascx ewareadmodetoolbar.ascx 3,963 07-Sep-2018 11:38
ewastringshandler.ashx ewastringshandler.ashx 317 11-Sep-2018 02:01
ewrdynamicimageprovider.aspx dynamicimageprovider.aspx 433 07-Sep-2018 11:38
ewrdynamicslicerprovider.aspx dynamicslicerprovider.aspx 529 07-Sep-2018 11:38
ewrtreeview.js ewrtreeview.js 19,012 07-Sep-2018 11:38
ewrxlfilehandler.aspx xlfilehandler.aspx 421 07-Sep-2018 11:38
ewrxlviewer.aspx xlviewer.aspx 9,316 07-Sep-2018 11:38
ewrxlviewerinternal.aspx xlviewerinternal.aspx 13,540 07-Sep-2018 11:38
excelrest.aspx excelrest.aspx 923 07-Sep-2018 11:38
excelservercreateapplication.aspx excelservercreateapplication.aspx 5,364 07-Sep-2018 11:37
excelserversafedataprovider.aspx excelserversafedataprovider.aspx 6,188 07-Sep-2018 11:37
excelserversafedataproviders.aspx excelserversafedataproviders.aspx 5,219 07-Sep-2018 11:37
excelserversettings.aspx excelserversettings.aspx 10,724 07-Sep-2018 11:37
excelservertrusteddcl.aspx excelservertrusteddcl.aspx 5,753 07-Sep-2018 11:37
excelservertrusteddcls.aspx excelservertrusteddcls.aspx 5,196 07-Sep-2018 11:37
excelservertrustedlocation.aspx excelservertrustedlocation.aspx 11,928 07-Sep-2018 11:37
excelservertrustedlocations.aspx excelservertrustedlocations.aspx 5,213 07-Sep-2018 11:37
excelserveruserdefinedfunction.aspx excelserveruserdefinedfunction.aspx 6,048 07-Sep-2018 11:37
excelserveruserdefinedfunctions.aspx excelserveruserdefinedfunctions.aspx 5,229 07-Sep-2018 11:37
excelservicedisco.aspx excelservicedisco.aspx 1,401 07-Sep-2018 11:38
excelservicesadmin.aspx excelservicesadmin.aspx 5,861 07-Sep-2018 11:37
excelservicewsdl.aspx excelservicewsdl.aspx 58,456 07-Sep-2018 11:38
excelwebrenderer.ascx excelwebrenderer.ascx 4,877 07-Sep-2018 11:38
inputformexcelserversetting.ascx inputformexcelserversetting.ascx 2,777 07-Sep-2018 11:37
mewadynamicimageprovider.aspx dynamicimageprovider.aspx 433 07-Sep-2018 11:38
microsoft.office.excel.webui.internal.dll microsoft.office.excel.webui.internal.dll 14.0.7006.1000 641,640 11-Sep-2018 02:01
microsoft.office.excel.webui.mobile.dll microsoft.office.excel.webui.mobile.dll 14.0.7160.5000 114,760 11-Sep-2018 02:01
slicerrenderer.ascx slicerrenderercontrol.ascx 7,687 07-Sep-2018 11:38
xlsrv.dll xlsrv.dll 14.0.7241.5000 14,669,216 16-Oct-2019 07:45
xlsrvintl.dll.1033 xlsrvintl.dll 14.0.7241.5000 108,464 15-Oct-2019 06:17

How to get help and support for this security updateHelp for installing updates: Protect yourself online

Help for protecting your Windows-based computer from viruses and malware: Microsoft Security

Local support according to your country: International Support

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.003

Percentile

69.8%