This update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Office.
Microsoft has released security bulletin MS14-017. Learn more about how to obtain the fixes that are included in this security bulletin:
- Individual, small business, and organizational users should use the Windows automatic updating feature to install the fixes from Microsoft Update. To do this, see Get security updates automatically on the Microsoft Safety and Security Center website.
- For IT professionals, see Microsoft Security Bulletin MS14-017 on the Security TechCenter website.
How to obtain help and support for this security updateHelp installing updates: Support for Microsoft Update
Security solutions for IT professionals: TechNet Security Troubleshooting and Support
Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center
Local support according to your country: International Support
More information about this security updateThis security update may fail to install on a computer that is running Microsoft Web Apps Server 2013 if the computer also has Office 2013 Service Pack 1 (SP1) installed. Microsoft is researching this problem. We will post more information in this article when the information becomes available.
Restart informationYou may have to restart the computer after you install this security update.
In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.
To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update.
See Why you may be prompted to restart your computer after you install a security update on a Windows-based computer for more information.
Removal informationNote We do not recommend that you remove any security update.
To remove this security update, use the Add or Remove Programs item or use the Programs and Features item in Control Panel.
Note When you remove this security update, you may be prompted to insert the disc that contains Microsoft Office. Additionally, you may not have the option to uninstall this security update from the Add or Remove Programs item or the Programs and Features item in Control Panel. There are several possible causes for this issue.
See Information about the ability to uninstall Office updates for more information.
FAQWhat is security update 2863919 required for?
Microsoft provides a complementary product for Word 2010 to a closed group of independent software developers. This product extends the functionality of Word 2010 and runs as part of the Microsoft Office 2010 product family. Update 2863919 targets only this complementary product. Specifically, a component of this product is updated by security update 2863919 to address the vulnerability that's described in security bulletin MS14-017. The updated product requires a separate installation (in addition to Office 2010), and this is available to customers directly from Microsoft under separate license terms and conditions. The updated product has never been generally available through any public distribution channel in the past, nor will it be made available in the future. Unless this product has been installed in addition to Office 2010, you do not have to install security update 2863919, nor will it be technically possible to do this. Instead, install security update 2863926 to resolve the vulnerability that's described in Security Bulletin MS14-017.
Article ID: 2863919 - Last Review: Oct 24, 2014 - Revision: 1