Description of the security update for Outlook 2013: February 13, 2018

Applies to: Microsoft Office 2013 Service Pack 1

Summary


This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2018-0850 and Microsoft Common Vulnerabilities and Exposures CVE-2018-0852.

Note To apply this security update, you must have the release version of Outlook 2016 installed on the computer.

Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer (.msi)-based edition of Office 2013. It doesn't apply to the Office 2013 Click-to-Run editions, such as Microsoft Office 365 Home (see Determining your Office version).

Improvements and fixes


This security update contains the following nonsecurity improvements and fixes:

  • Corrects the translation for the string “-----Original Appointment-----” in the Chinese Simplified version of Microsoft Outlook 2013.
  • Tells you how to disable Exchange Active Sync (EAS) account creation in Outlook. After you install this update, follow the steps in the Registry information section to disable EAS account creation.
  • Fixes the following issues:
    • When you reply a meeting request in Outlook 2013, the font isn't displayed as expected in some cases.
    • Outlook 2013 may crash when you change to Calendar view or you work in calendar.
    • You see that the location disappears from meeting requests when you add recipients as attendees.
    • When you delete a batch of folders on a SharePoint site, Outlook only deletes a single folder during the sync.

How to get and install the update


Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Registry Information


Important
Follow the steps in this section carefully. Serious problems might occur if you modify the registry incorrectly. Before you modify it, back up the registry for restoration in case problems occur.

  1. Exit all Microsoft Office applications.
  2. Start Registry Editor:
    • In Windows 10, go to Start, enter regedit in the Search box, and then select regedit.exe in the search results.
    • In Windows 8 or Windows 8.1, move your mouse to the upper-right corner, select Search, enter regedit in the search text box, and then select regedit.exe in the search results.
    • In Windows 7, select Start, enter regedit in the Start Search box, and then select regedit.exe in the search results.
  3. Locate and then select the following registry subkey:

    HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Setup\

  4. On the Edit menu, point to New, and then select DWORD Value.
  5. Enter EnableEASAccountCreation, and then press Enter.
  6. In the Details pane, press and hold (or right-click) EnableEASAccountCreation, and then select Modify.
  7. In the Value data box, enter 0, and then select OK.
  8. Exit Registry Editor.

More Information


Security update deployment information

For deployment information about this update, see security update deployment information: February 13, 2018.

Security update replacement information

This security update replaces previously released security update KB 4011637.

File hash information

Package name Package hash SHA 1 Package hash SHA 2
outlook2013-kb4011697-fullfile-x64-glb.exe BFE3817273BC3DED87E75DC93DECAB20EC0331AC 962D4F4D2B30B63C19424C54F260431A2F521CE5E344C73C9320C9C88484BE98
outlook2013-kb4011697-fullfile-x86-glb.exe 2C8346F4DB2DF104D7B6D2D6BB0A312B3882AABC 4DEE3E69BDCE830F1DE99ECB603C1DA017BACC52FCB0CEF919BC853A3DD3BCB5

File information

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight-saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

How to get help and support for this security update

Help for installing updates: Windows Update FAQ

Security solutions for IT professionals: Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

Propose a feature or provide feedback on Office Core: Office User Voice portal