Lucene search

K
mskbMicrosoftKB5002537
HistoryFeb 13, 2024 - 8:00 a.m.

Description of the security update for Office 2016: February 13, 2024 (KB5002537)

2024-02-1308:00:00
Microsoft
support.microsoft.com
28
microsoft office 2016
remote code execution
security update
cve-2024-20673
cve-2024-21413
microsoft update catalog
microsoft download center
file hash
deployment information
replacement information.

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

Description of the security update for Office 2016: February 13, 2024 (KB5002537)

Summary

This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see the following security advisories:

**Note:**To apply this security update, you must have the release version of Microsoft Office 2016 installed on the computer.

Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer (.msi)-based edition of Office 2016. It doesn’t apply to the Office 2016 Click-to-Run editions, such as Microsoft Office 365 Home. (See What version of Office am I using?)

Improvements and fixes

After you install KB 5002457 (but not together with KB 5002498), a cross-update dependency is introduced that prevents Office applications from starting. This update eliminates the dependency and allows the applications to start even if both updates are not installed. However, both updates should be installed to address the original security issue.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the standalone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the standalone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More information

Security update deployment information

For deployment information about this update, see Deployments - Security Update Guide.

Security update replacement information

This security update replaces previously released security update 5002521.

File hash information

File name SHA256 hash
mso2016-kb5002537-fullfile-x86-glb.exe 2BED04FB9A8D4E439BE4CDFD3D97D538F590603A627867CD9443934C9996C7E4
mso2016-kb5002537-fullfile-x64-glb.exe 699A3C6097803C90FCF06E342861B163FA5C66DA48B027C4EE756517B62A9FFE

File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

__

For all supported x86-based versions of Office 2016

File identifier File name File version File size Date Time
firstrun.exe firstrun.exe 16.0.5413.1000 774144 1-Feb-24 05:27
msointl.dll.x86.1025 msointl.dll 16.0.5432.1000 3290056 1-Feb-24 04:13
msointl.dll.x86.1026 msointl.dll 16.0.5430.1000 1888344 1-Feb-24 04:02
msointl.dll.x86.1027 msointl.dll 16.0.5432.1000 1820104 1-Feb-24 04:09
msointl.dll.x86.1029 msointl.dll 16.0.5430.1000 1930184 1-Feb-24 04:02
msointl.dll.x86.1030 msointl.dll 16.0.5430.1000 1760200 1-Feb-24 04:13
msointl.dll.x86.1031 msointl.dll 16.0.5430.1000 1950400 1-Feb-24 04:02
msointl.dll.x86.1032 msointl.dll 16.0.5430.1000 2059720 1-Feb-24 04:13
msointl.dll.x86.3082 msointl.dll 16.0.5432.1000 1828440 1-Feb-24 04:02
msointl.dll.x86.1061 msointl.dll 16.0.5430.1000 1733688 1-Feb-24 04:02
msointl.dll.x86.1069 msointl.dll 16.0.5432.1000 1742792 1-Feb-24 04:09
msointl.dll.x86.1035 msointl.dll 16.0.5430.1000 1741000 1-Feb-24 04:02
msointl.dll.x86.1036 msointl.dll 16.0.5430.1000 1977304 1-Feb-24 04:13
msointl.dll.x86.1110 msointl.dll 16.0.5432.1000 1777208 1-Feb-24 04:09
msointl.dll.x86.1095 msointl.dll 16.0.5432.1000 1832608 1-Feb-24 04:09
msointl.dll.x86.1037 msointl.dll 16.0.5432.1000 2910096 1-Feb-24 04:02
msointl.dll.x86.1081 msointl.dll 16.0.5432.1000 1954280 1-Feb-24 04:13
msointl.dll.x86.1050 msointl.dll 16.0.5432.1000 1743928 1-Feb-24 04:13
msointl.dll.x86.1038 msointl.dll 16.0.5430.1000 1953880 1-Feb-24 04:02
msointl.dll.x86.1057 msointl.dll 16.0.5430.1000 1624232 1-Feb-24 04:02
msointl.dll.x86.1040 msointl.dll 16.0.5430.1000 1769128 1-Feb-24 04:02
msointl.dll.x86.1041 msointl.dll 16.0.5430.1000 2014664 1-Feb-24 04:13
msointl.dll.x86.1087 msointl.dll 16.0.5430.1000 2106536 1-Feb-24 04:02
msointl.dll.x86.1099 msointl.dll 16.0.5432.1000 1942616 1-Feb-24 04:09
msointl.dll.x86.1042 msointl.dll 16.0.5432.1000 2771512 1-Feb-24 04:02
msointl.dll.x86.1063 msointl.dll 16.0.5432.1000 1847752 1-Feb-24 04:13
msointl.dll.x86.1062 msointl.dll 16.0.5432.1000 1834176 1-Feb-24 04:02
msointl.dll.x86.1086 msointl.dll 16.0.5430.1000 1651800 1-Feb-24 04:02
msointl.dll.x86.1044 msointl.dll 16.0.5430.1000 1723448 1-Feb-24 04:13
msointl.dll.x86.1043 msointl.dll 16.0.5430.1000 1773512 1-Feb-24 04:13
msointl.dll.x86.1045 msointl.dll 16.0.5430.1000 1919432 1-Feb-24 04:13
msointl.dll.x86.1046 msointl.dll 16.0.5430.1000 1831368 1-Feb-24 04:13
msointl.dll.x86.2070 msointl.dll 16.0.5430.1000 1838536 1-Feb-24 04:02
msointl.dll.x86.1048 msointl.dll 16.0.5430.1000 1965248 1-Feb-24 04:13
msointl.dll.x86.1049 msointl.dll 16.0.5432.1000 1906336 1-Feb-24 04:02
msointl.dll.x86.1051 msointl.dll 16.0.5430.1000 1973920 1-Feb-24 04:02
msointl.dll.x86.1060 msointl.dll 16.0.5432.1000 1810088 1-Feb-24 04:02
msointl.dll.x86.2074 msointl.dll 16.0.5430.1000 1768136 1-Feb-24 04:13
msointl.dll.x86.9242 msointl.dll 16.0.5432.1000 1797288 1-Feb-24 04:13
msointl.dll.x86.1053 msointl.dll 16.0.5430.1000 1736896 1-Feb-24 04:02
msointl.dll.x86.1054 msointl.dll 16.0.5432.1000 1829568 1-Feb-24 04:13
msointl.dll.x86.1055 msointl.dll 16.0.5432.1000 2001056 1-Feb-24 04:02
msointl.dll.x86.1058 msointl.dll 16.0.5430.1000 1894056 1-Feb-24 04:02
msointl.dll.x86.1066 msointl.dll 16.0.5430.1000 2008120 1-Feb-24 04:02
msointl.dll.x86.2052 msointl.dll 16.0.5432.1000 2324616 1-Feb-24 04:13
msointl.dll.x86.1028 msointl.dll 16.0.5432.1000 2331752 1-Feb-24 04:13
f_central_msvcp100_x86.afa96eb4_fa9f_335c_a7cb_36079407553d msvcp100.dll 435136 1-Feb-24 05:27
f_central_msvcr100_x86.afa96eb4_fa9f_335c_a7cb_36079407553d msvcr100.dll 787856 1-Feb-24 05:27
msores.dll msores.dll 16.0.5420.1000 81687096 1-Feb-24 05:27
msores.dll.x86 msores.dll 16.0.5420.1000 81687096 1-Feb-24 05:29
mso.dll.x86 mso.dll 16.0.5435.1001 14433688 2-Feb-24 12:10
msointl.dll.x86.1033 msointl.dll 16.0.5430.1000 1541688 1-Feb-24 05:28

__

For all supported x64-based versions of Office 2016

File identifier File name File version File size Date Time
firstrun.exe firstrun.exe 16.0.5149.1000 816928 1-Feb-24 05:28
msointl.dll.x64.1025 msointl.dll 16.0.5435.1001 3327352 2-Feb-24 12:26
msointl.dll.x64.1026 msointl.dll 16.0.5435.1001 1912296 2-Feb-24 12:14
msointl.dll.x64.1027 msointl.dll 16.0.5435.1001 1844160 2-Feb-24 12:22
msointl.dll.x64.1029 msointl.dll 16.0.5435.1001 1954760 2-Feb-24 12:26
msointl.dll.x64.1030 msointl.dll 16.0.5435.1001 1784296 2-Feb-24 12:26
msointl.dll.x64.1031 msointl.dll 16.0.5435.1001 1974688 2-Feb-24 12:26
msointl.dll.x64.1032 msointl.dll 16.0.5435.1001 2083816 2-Feb-24 12:26
msointl.dll.x64.3082 msointl.dll 16.0.5435.1001 1852864 2-Feb-24 12:26
msointl.dll.x64.1061 msointl.dll 16.0.5435.1001 1758112 2-Feb-24 12:14
msointl.dll.x64.1069 msointl.dll 16.0.5435.1001 1767360 2-Feb-24 12:22
msointl.dll.x64.1035 msointl.dll 16.0.5435.1001 1764808 2-Feb-24 12:26
msointl.dll.x64.1036 msointl.dll 16.0.5435.1001 2001872 2-Feb-24 12:26
msointl.dll.x64.1110 msointl.dll 16.0.5435.1001 1801112 2-Feb-24 12:22
msointl.dll.x64.1095 msointl.dll 16.0.5435.1001 1856960 2-Feb-24 12:22
msointl.dll.x64.1037 msointl.dll 16.0.5435.1001 2947424 2-Feb-24 12:26
msointl.dll.x64.1081 msointl.dll 16.0.5435.1001 1978856 2-Feb-24 12:26
msointl.dll.x64.1050 msointl.dll 16.0.5435.1001 1768352 2-Feb-24 12:26
msointl.dll.x64.1038 msointl.dll 16.0.5435.1001 1977752 2-Feb-24 12:14
msointl.dll.x64.1057 msointl.dll 16.0.5435.1001 1648064 2-Feb-24 12:14
msointl.dll.x64.1040 msointl.dll 16.0.5435.1001 1792968 2-Feb-24 12:26
msointl.dll.x64.1041 msointl.dll 16.0.5435.1001 2038720 2-Feb-24 12:26
msointl.dll.x64.1087 msointl.dll 16.0.5435.1001 2130296 2-Feb-24 12:26
msointl.dll.x64.1099 msointl.dll 16.0.5435.1001 1967008 2-Feb-24 12:22
msointl.dll.x64.1042 msointl.dll 16.0.5435.1001 2795456 2-Feb-24 12:26
msointl.dll.x64.1063 msointl.dll 16.0.5435.1001 1871736 2-Feb-24 12:26
msointl.dll.x64.1062 msointl.dll 16.0.5435.1001 1858424 2-Feb-24 12:26
msointl.dll.x64.1086 msointl.dll 16.0.5435.1001 1675720 2-Feb-24 12:14
msointl.dll.x64.1044 msointl.dll 16.0.5435.1001 1747392 2-Feb-24 12:26
msointl.dll.x64.1043 msointl.dll 16.0.5435.1001 1797536 2-Feb-24 12:26
msointl.dll.x64.1045 msointl.dll 16.0.5435.1001 1943496 2-Feb-24 12:26
msointl.dll.x64.1046 msointl.dll 16.0.5435.1001 1855904 2-Feb-24 12:26
msointl.dll.x64.2070 msointl.dll 16.0.5435.1001 1862632 2-Feb-24 12:26
msointl.dll.x64.1048 msointl.dll 16.0.5435.1001 1989024 2-Feb-24 12:26
msointl.dll.x64.1049 msointl.dll 16.0.5435.1001 1930176 2-Feb-24 12:26
msointl.dll.x64.1051 msointl.dll 16.0.5435.1001 1998200 2-Feb-24 12:14
msointl.dll.x64.1060 msointl.dll 16.0.5435.1001 1834432 2-Feb-24 12:14
msointl.dll.x64.2074 msointl.dll 16.0.5435.1001 1792376 2-Feb-24 12:26
msointl.dll.x64.9242 msointl.dll 16.0.5435.1001 1821592 2-Feb-24 12:26
msointl.dll.x64.1053 msointl.dll 16.0.5435.1001 1761256 2-Feb-24 12:26
msointl.dll.x64.1054 msointl.dll 16.0.5435.1001 1853416 2-Feb-24 12:26
msointl.dll.x64.1055 msointl.dll 16.0.5435.1001 2025360 2-Feb-24 12:26
msointl.dll.x64.1058 msointl.dll 16.0.5435.1001 1917856 2-Feb-24 12:26
msointl.dll.x64.1066 msointl.dll 16.0.5435.1001 2031992 2-Feb-24 12:14
msointl.dll.x64.2052 msointl.dll 16.0.5435.1001 2348424 2-Feb-24 12:26
msointl.dll.x64.1028 msointl.dll 16.0.5435.1001 2356104 2-Feb-24 12:26
msointl.dll.x86.1025 msointl.dll 16.0.5432.1000 3290056 1-Feb-24 04:13
msointl.dll.x86.1026 msointl.dll 16.0.5430.1000 1888344 1-Feb-24 04:02
msointl.dll.x86.1029 msointl.dll 16.0.5430.1000 1930184 1-Feb-24 04:13
msointl.dll.x86.1030 msointl.dll 16.0.5430.1000 1760200 1-Feb-24 04:02
msointl.dll.x86.1031 msointl.dll 16.0.5430.1000 1950400 1-Feb-24 04:13
msointl.dll.x86.1032 msointl.dll 16.0.5430.1000 2059720 1-Feb-24 04:02
msointl.dll.x86.3082 msointl.dll 16.0.5432.1000 1828440 1-Feb-24 04:02
msointl.dll.x86.1061 msointl.dll 16.0.5430.1000 1733688 1-Feb-24 04:02
msointl.dll.x86.1035 msointl.dll 16.0.5430.1000 1741000 1-Feb-24 04:13
msointl.dll.x86.1036 msointl.dll 16.0.5430.1000 1977304 1-Feb-24 04:02
msointl.dll.x86.1037 msointl.dll 16.0.5432.1000 2910096 1-Feb-24 04:13
msointl.dll.x86.1081 msointl.dll 16.0.5432.1000 1954280 1-Feb-24 04:02
msointl.dll.x86.1050 msointl.dll 16.0.5432.1000 1743928 1-Feb-24 04:13
msointl.dll.x86.1038 msointl.dll 16.0.5430.1000 1953880 1-Feb-24 04:02
msointl.dll.x86.1057 msointl.dll 16.0.5430.1000 1624232 1-Feb-24 04:02
msointl.dll.x86.1040 msointl.dll 16.0.5430.1000 1769128 1-Feb-24 04:02
msointl.dll.x86.1041 msointl.dll 16.0.5430.1000 2014664 1-Feb-24 04:13
msointl.dll.x86.1087 msointl.dll 16.0.5430.1000 2106536 1-Feb-24 04:02
msointl.dll.x86.1042 msointl.dll 16.0.5432.1000 2771512 1-Feb-24 04:02
msointl.dll.x86.1063 msointl.dll 16.0.5432.1000 1847752 1-Feb-24 04:13
msointl.dll.x86.1062 msointl.dll 16.0.5432.1000 1834176 1-Feb-24 04:02
msointl.dll.x86.1086 msointl.dll 16.0.5430.1000 1651800 1-Feb-24 04:02
msointl.dll.x86.1044 msointl.dll 16.0.5430.1000 1723448 1-Feb-24 04:13
msointl.dll.x86.1043 msointl.dll 16.0.5430.1000 1773512 1-Feb-24 04:13
msointl.dll.x86.1045 msointl.dll 16.0.5430.1000 1919432 1-Feb-24 04:13
msointl.dll.x86.1046 msointl.dll 16.0.5430.1000 1831368 1-Feb-24 04:13
msointl.dll.x86.2070 msointl.dll 16.0.5430.1000 1838536 1-Feb-24 04:02
msointl.dll.x86.1048 msointl.dll 16.0.5430.1000 1965248 1-Feb-24 04:13
msointl.dll.x86.1049 msointl.dll 16.0.5432.1000 1906336 1-Feb-24 04:02
msointl.dll.x86.1051 msointl.dll 16.0.5430.1000 1973920 1-Feb-24 04:02
msointl.dll.x86.1060 msointl.dll 16.0.5432.1000 1810088 1-Feb-24 04:02
msointl.dll.x86.2074 msointl.dll 16.0.5430.1000 1768136 1-Feb-24 04:13
msointl.dll.x86.9242 msointl.dll 16.0.5432.1000 1797288 1-Feb-24 04:13
msointl.dll.x86.1053 msointl.dll 16.0.5430.1000 1736896 1-Feb-24 04:02
msointl.dll.x86.1054 msointl.dll 16.0.5432.1000 1829568 1-Feb-24 04:13
msointl.dll.x86.1055 msointl.dll 16.0.5432.1000 2001056 1-Feb-24 04:02
msointl.dll.x86.1058 msointl.dll 16.0.5430.1000 1894056 1-Feb-24 04:02
msointl.dll.x86.1066 msointl.dll 16.0.5430.1000 2008120 1-Feb-24 04:02
msointl.dll.x86.2052 msointl.dll 16.0.5432.1000 2324616 1-Feb-24 04:13
msointl.dll.x86.1028 msointl.dll 16.0.5432.1000 2331752 1-Feb-24 04:02
f_central_msvcp100_x64.bff61907_aa2d_3a26_8666_98d956a62abc msvcp100.dll 621928 1-Feb-24 05:28
f_central_msvcr100_x64.bff61907_aa2d_3a26_8666_98d956a62abc msvcr100.dll 843120 1-Feb-24 05:28
conversion.office.msores.dll msores.dll 16.0.5419.1000 81687096 1-Feb-24 05:25
msores.dll msores.dll 16.0.5419.1000 81687096 1-Feb-24 05:27
ppt.conversion.msores.dll msores.dll 16.0.5419.1000 81687096
ppt.edit.msores.dll msores.dll 16.0.5419.1000 81687096
wac.office.msores.dll msores.dll 16.0.5419.1000 81687096
msores.dll msores.dll 16.0.5420.1000 81687096 1-Feb-24 05:27
msores.dll.x86 msores.dll 16.0.5420.1000 81687096 1-Feb-24 05:29
mso.dll.x64 mso.dll 16.0.5435.1001 19892648 2-Feb-24 12:12
mso.dll.x86 mso.dll 16.0.5435.1001 14433688 2-Feb-24 12:14
msointl.dll.x64.1033 msointl.dll 16.0.5430.1000 1566264 1-Feb-24 05:25
msointl.dll.x86.1033 msointl.dll 16.0.5430.1000 1541688 1-Feb-24 05:27

Information about protection and security

Protect yourself online: Windows Security supportLearn how we guard against cyber threats: Microsoft Security

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.2 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%