MS12-064: Vulnerabilities in Microsoft Word could allow remote code execution: October 9, 2012

INTRODUCTION

Microsoft has released security bulletin MS12-064. To view the complete security bulletin, go to one of the following Microsoft websites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

Known issues and additional information about this security update

After you install one of the security updates that are described in Microsoft security bulletin MS12-064, you may experience issues with Digital Rights Management in Microsoft Word. To resolve these issues, install the most recent security update for Microsoft Word, described in MS12-079. Refer to the following table for details.
Update with code signing issues To resolve the issues, install this update
Microsoft Office Word 2003 (KB2687483) in MS12-064Microsoft Office Word 2003 (KB2760497) in MS12-079
Microsoft Office Word 2007 (KB2687315) in MS12-064Microsoft Office Word 2007 (KB2760421) in MS12-079
Microsoft Word 2010 (KB2553488) in MS12-064Microsoft Word 2010 (KB2760410) in MS12-079
Microsoft Word Viewer (KB2687485) in MS12-064Microsoft Word Viewer (KB2760498) in MS12-079
For more information about these code signing issues in Microsoft security updates, see Microsoft Security Advisory 2749655.


The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed below each article link.
  • 2553488 : MS12-064: Description of the security update for Word 2010 Service Pack 1: October 9, 2012


    Known issues in security update 2553488:
    • After you install this security update, when you drag an attachment from one Microsoft Office Outlook 2007 or Microsoft Outlook 2010 email message to another, the file name extension is duplicated. If you then drag the attachment from that email message to another email message, the file name extension appears in triplicate. This pattern continues each additional time you drag the attachment.

      For more information about how to resolve this issue, click the following article number to view the article in the Microsoft Knowledge Base:
      2782404 Attachment file extension is duplicated when added to email in Outlook 2007 and Outlook 2010
  • 2598237 : MS12-064: Description of the security update for Microsoft SharePoint Server 2010 Service Pack 1 (was): October 9, 2012
  • 2687314 : MS12-064: Description of the security update for 2007 Office system and the Compatibility Pack for Microsoft Office 2007 File Formats: October 9, 2012
  • 2687315 : MS12-064: Description of the security update for Word 2007 Service Pack 2: October 9, 2012


    Known issues in security update 2687315:
    • After you install this security update, when you drag an attachment from one Microsoft Office Outlook 2007 or Microsoft Outlook 2010 email message to another, the file name extension is duplicated. If you then drag the attachment from that email message to another email message, the file name extension appears in triplicate. The pattern continues as you drag the attachment more times.

      For more information about how to resolve this issue, click the following article number to view the article in the Microsoft Knowledge Base:
      2782404 Attachment file extension is duplicated when added to email in Outlook 2007 and Outlook 2010
  • 2687401 : MS12-064 and MS12-066: Description of the security update for Microsoft Office Online 2010 Service Pack 1: October 9, 2012

    Known issues in security update 2687401:
    • After you install this security update on all SharePoint servers, you will have to run the PSconfig tool to complete the installation. For more information about how to use the PSconfig tool, go to the following TechNet webpage:
  • 2687483 : MS12-064: Description of the security update for Word 2003 Service Pack 3: October 9, 2012
  • 2687485 : MS12-064: Description of the security update for Word Viewer: October 9, 2012
File hash information
Properties

Article ID: 2742319 - Last Review: Apr 17, 2014 - Revision: 1

Feedback