This update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a specially crafted file is opened in an affected version of Microsoft Office.
Microsoft has released security bulletin MS14-017. Learn more about how to obtain the fixes that are included in this security bulletin:
Individual, small business, and organizational users should use the Windows automatic updating feature to install the fixes from Microsoft Update. To do this, see Get security updates automatically on the Microsoft Safety and Security Center website.
This security update may fail to install on a computer that is running Microsoft Web Apps Server 2013 if the computer also has Office 2013 Service Pack 1 (SP1) installed. Microsoft is researching this problem. We will post more information in this article when the information becomes available.
You may have to restart the computer after you install this security update.
In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.
To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update.
Note We do not recommend that you remove any security update.
To remove this security update, use the Add or Remove Programs item or use the Programs and Features item in Control Panel.
Note When you remove this security update, you may be prompted to insert the disc that contains Microsoft Office. Additionally, you may not have the option to uninstall this security update from the Add or Remove Programs item or the Programs and Features item in Control Panel. There are several possible causes for this issue.
This security update replaces security update 2863901.
What is security update 2863919 required for? Microsoft provides a complementary product for Word 2010 to a closed group of independent software developers. This product extends the functionality of Word 2010 and runs as part of the Microsoft Office 2010 product family. Update 2863919 targets only this complementary product. Specifically, a component of this product is updated by security update 2863919 to address the vulnerability that's described in security bulletin MS14-017. The updated product requires a separate installation (in addition to Office 2010), and this is available to customers directly from Microsoft under separate license terms and conditions. The updated product has never been generally available through any public distribution channel in the past, nor will it be made available in the future. Unless this product has been installed in addition to Office 2010, you do not have to install security update 2863919, nor will it be technically possible to do this. Instead, install security update 2863926 to resolve the vulnerability that's described in Security Bulletin MS14-017.
The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
For all supported x86-based versions of Office 2010
For all supported x64-based versions of Office 2010