MS14-081: Vulnerabilities in Microsoft Word and Office Web Apps could allow remote code execution: December 9, 2014

Applies to: Word 2013Office Web Apps Server 2013Microsoft SharePoint Server 2013 Service Pack 1

Introduction


This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Microsoft Word file in an affected version of Office.

Summary


Microsoft has released security bulletin MS14-081. Learn more about how to obtain the fixes included in this security bulletin:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

More information about this security update

Known issues and additional information about this security update

The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed under each article link.
  • 2910916 MS14-081: Description of the security update for Word 2013: December 9, 2014
  • 2899518 MS14-081: Description of the security update for Office 2010: December 9, 2014
  • 2899519 MS14-081: Description of the security update for Word 2010: December 9, 2014
  • 2920793 MS14-081: Description of the security update for Word 2007: December 9, 2014
  • 3018888 MS14-081: Description of the security update for Office for Mac: December 9, 2014
  • 2920729 MS14-081: Description of the security update for Word Viewer: December 9, 2014
  • 2920792 MS14-081: Description of the security update for Office Compatibility Pack SP3: December 9, 2014
  • 2883050 MS14-081: Description of the security update for SharePoint Server 2013: December 9, 2014
  • 2899581 MS14-081: Description of the security update for SharePoint Server 2010: December 9, 2014
  • 2889851 MS14-081: Description of the security update for Office Web Apps Server 2013: December 9, 2014
  • 2910892 MS14-081: Description of the security update for Office Web Apps 2010: December 9, 2014