You are currently offline, waiting for your internet to reconnect

Your browser is out-of-date

You need to update your browser to use the site.

Update to the latest version of Internet Explorer

MS14-001: Vulnerabilities in Microsoft Word and Office web apps could allow remote code execution: January 14, 2014

INTRODUCTION
Microsoft has released security bulletin MS14-001. To view the complete security bulletin, go to one of the following Microsoft websites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Known issues and additional information about this security update

The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed below each article link.
  • 2827224 MS14-001: Description of the security update for Word 2013: January 14, 2014
  • 2837577 MS14-001: Description of the security update for Word Automation Services in SharePoint Server 2010: January 14, 2014

    Note After you install this security update on all SharePoint servers and SharePoint services, you have to run the PSconfig tool to complete the installation.
  • 2837596 MS14-001: Description of the security update for Word Online: January 14, 2014
  • 2837615 MS14-001: Description of the security update for Office Compatibility Pack: January 14, 2014
  • 2837617 MS14-001: Description of the security update for Word 2007: January 14, 2014
  • 2837625 MS14-001: Description of the security update for Word Automation Services in Microsoft SharePoint Server 2013: January 14, 2014

    Note After you install this security update on all SharePoint servers and SharePoint services, you have to run the PSconfig tool to complete the installation.
  • 2863834 MS14-001: Description of the security update for Word 2013 primary interop assembly (PIA): January 14, 2014
  • 2863866 MS14-001: Description of the security update for Word 2003: January 14, 2014
  • 2863867 MS14-001: Description of the security update for Microsoft Word Viewer: January 14, 2014
  • 2863879 MS14-001: Description of the security update for Office Web Apps Server: January 14, 2014
  • 2863901 MS14-001: Description of the security update for Microsoft Office 2010: January 14, 2014
  • 2863902 MS14-001: Description of the security update for Word 2010 Service Pack 1 and Service Pack 2: January 14, 2014

File hash information

File nameSHA1 hashSHA256 hash
kb24286772010-kb2837590-fullfile-x64-glb.exeD5CA1D2B8F6AB2E437F06E27BA1B0B38C5F1C71F36A9E0CE259ADE52FD75C1D2F7556C1F7DD467EB55F0F81ED08ABAF67835FA7E
kb24286772010-kb2837590-fullfile-x86-glb.exe7FC8DF9010236E3AF1E1C925645E4A02590C515CFAC3FFC6121F843098A44907EAA61FF2EFF029B565DECEA25338F4641A8F3C16
wac2010-kb2837596-fullfile-x64-glb.exeECC72413FFC05E41F42B4C7EEF22A21CF8F4553E489B6A90ECB5F13F8BFFAA65E0E1E8B67BE6B1C41488E62A55AF35E4FADE60A7
wdsrv2010-kb2837577-fullfile-x64-glb.exeD4813C37FDB80466E676D2D7EFF1394C5A4394D163C2ED82AF61570C0A0E7E27EA2ABDCB8B4C0C7672C9E5DB264AC29DB756F86D
word2010-kb2837593-fullfile-x64-glb.exe84E5A00726E41D41C2984175E04C12D8F9DBBBE756816BFB9567FB45D6C5E1465F333451ADEAF324968C654EDC664A5B3CADCEAC
word2010-kb2837593-fullfile-x86-glb.exe7E695C573B011D3DD91D5ED494A54CB98D3398F3E50FE06D55FBA422ED3F0D1EB5B1285C388432AF64A55C1D819E203BB48AEC39
update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service dos
Properties

Article ID: 2916605 - Last Review: 04/17/2014 03:20:00 - Revision: 1.1

  • Microsoft Word 2013
  • Microsoft Office 2010 Service Pack 1
  • Microsoft Office 2010 Service Pack 2
  • Microsoft Word 2010
  • Microsoft Word Home and Student 2010
  • Microsoft Office Word 2007
  • Microsoft Office Word 2007 (Home and Student version)
  • Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats
  • Microsoft Office Web Apps Server 2013
  • Microsoft Word Online
  • kbexpertiseinter kbqfe kbsecurity kbsecbulletin kbsecvulnerability kbbug kbfix kbsurveynew KB2916605
Feedback