MS15-033: Description of the security update for Word 2010: April 14, 2015

Vzťahuje sa na: Microsoft Word 2010

Summary


This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Microsoft Word file in an affected version of Office. To learn more about the vulnerabilities, see Microsoft Security Bulletin MS15-033.

Note To apply this security update, you must have Service Pack 2 for Office 2010 installed on the computer.

To resolve the vulnerabilities, you need to apply the following updates:
  • 2965236 MS15-033: Description of the security update for Office 2010: April 14, 2015
  • 2553428 MS15-033: Description of the security update for Word 2010: April 14, 2015

Improvements and fixes

This update also contains fixes for the following nonsecurity issues:
  • When you move an image to an unprotected section of a Word document that contains a protected section in Word 2010, Word 2010 may crash.
  • After you create a document that is based on a template that begins with a number sign (#) that is located under a Universal Naming Convention (UNC) share path, all files that begin with an underscore (_) in the share path are deleted without any notification.
  • New modules are not displayed in the Document Inspector dialog box and backstage in some localized versions of Word 2010.

How to obtain and install the update


Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Download Download 32-bit (KB2553428)
Download Download 64-bit (KB2553428)

More Information