MS16-099: Description of the security update for Outlook 2010: August 9, 2016

Summary
This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-099.

Note To apply this security update, you must have the release version of Service Pack 2 for Office 2010 installed on the computer.

For a complete list of affected versions of Microsoft Office software, see Microsoft Knowledge Base article KB3177451.

Improvements and fixes
This security update contains improvements and fixes for the following nonsecurity issues:
  • Attachments are rearranged, deleted, duplicated, or corrupted.
How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see the "Turn on automatic updating in Control Panel" section of this Safety & Security Center article.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.
More information

FAQ

Q: Does this release contain any additional security-related changes to functionality?

A: Yes. In addition to the security updates that address the vulnerabilities that are described in this bulletin, Microsoft is releasing updates to add a security feature improvement. These updates provides additional information to users when Outlook makes a network connection through a proxy server that requires authentication.

Sometimes, the additional information is not available. In this situation, Outlook silently prevents the connection. This is true in the following configurations:
  • From Outlook 2007 or Outlook 2010, any connection to AutoDiscover or Exchange Web Services
  • From Outlook 2010, any connections that uses MAPI over HTTP
  • From Outlook 2013 or Outlook 2016, any connection to AutoDiscover or Exchange Web Services if the primary mailbox uses a remote procedure call (RPC) or RPC over HTTP connection.
You can use the AllowOutlookHttpProxyAuthentication registry entry to allow Outlook to connect in these configurations after it prompts the user for credentials.

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows

To allow Outlook to make a connection through an authenticating proxy without using the security feature enhancement, add a DWORD value that's named AllowOutlookHttpProxyAuthentication and that has a value of 1 to the following registry subkey, as appropriate for your version:
Outlook 2016:
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\HTTP

Outlook 2013:
HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\HTTP

Outlook 2010:
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\ HTTP

Outlook 2007:
HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\HTTP


To add this registry entry, follow these steps:
  1. Click Start, click Run, type regedit in the Open box, and then click OK.
  2. Locate and then click the appropriate subkey in the registry.
  3. On the Edit menu, point to New, and then click DWORD Value.
  4. Type AllowOutlookHttpProxyAuthentication for the name of the DWORD, and then press Enter.
  5. Right-click AllowOutlookHttpProxyAuthentication, and then click Modify.
  6. In the Value data box, type 1, and then click OK.
  7. Exit Registry Editor, and then restart Outlook.

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base article KB3177451.

Security update replacement information

This security update doesn't replace any previously released update.

File hash information

Package NamePackage Hash SHA 1Package Hash SHA 2
outlookloc2010-kb3115474-fullfile-x86-glb.exeB7869E2F22C1F7C283B06ED6C391FE7869F066CCCE52902FE67A060A9A69F796EE2C0D6A56D21497F6FE7DFC1894C12C30804095
outlookloc2010-kb3115474-fullfile-x64-glb.exe398C0255042C2716920EEF398E31E9AD85E3A77BCB21BFAA9138CFD280D5B346D4379FA55C8F09A5867CC3D90542D130EF12E1D1

File information

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table.

For all supported x86-based versions of Outlook 2010

File identifierFile nameFile versionFile sizeDateTime
cnfnot32.exe_0004cnfnot32.exe14.0.7169.5000161,99212-Apr-201601:28
contab32.dllcontab32.dll14.0.7169.5000145,13620-Apr-201607:30
dlgsetp.dlldlgsetp.dll14.0.7169.500098,02412-Apr-201601:28
emsmdb32.dll_0005emsmdb32.dll14.0.7172.50001,975,68013-Jul-201609:36
envelope.dllenvelope.dll14.0.7172.5000165,12812-Jul-201607:49
exsec32.dll_0001exsec32.dll14.0.7169.5000341,66420-Apr-201607:30
impmail.dllimpmail.dll14.0.7159.5000137,29602-Sep-201511:52
mapiph.dllmapiph.dll14.0.7169.5000286,52812-Apr-201601:28
mimedir.dllmimedir.dll14.0.7159.5000362,04802-Sep-201511:52
mspst32.dll_0004mspst32.dll14.0.7172.50001,215,84813-Jul-201609:36
olkfstub.dll.x86olkfstub.dll14.0.7159.5000257,12002-Sep-201511:52
olmapi32.dllolmapi32.dll14.0.7172.50003,333,37613-Jul-201609:36
omsmain.dllomsmain.dll14.0.7159.5000727,13605-Sep-201512:28
omsxp32.dllomsxp32.dll14.0.7159.5000235,64005-Sep-201512:28
outlmime.dlloutlmime.dll14.0.7172.5000534,29612-Jul-201607:49
outlook.exeoutlook.exe14.0.7172.500015,775,94413-Jul-201609:36
outlph.dlloutlph.dll14.0.7172.5000332,59213-Jul-201609:36
outlvbs.dll_0001outlvbs.dll14.0.7169.500065,76812-Apr-201601:28
pstprx32.dllpstprx32.dll14.0.7172.5000320,21612-Jul-201607:49
recall.dllrecall.dll14.0.7159.500046,67202-Sep-201511:52
rm.dllrm.dll14.0.7169.500088,28012-Apr-201601:28
rtfhtml.dllrtfhtml.dll14.0.7159.5000421,46405-Sep-201512:22
scanpst.exe_0002scanpst.exe14.0.7169.500049,48012-Apr-201601:28
scnpst32.dllscnpst32.dll14.0.7172.5000346,96812-Jul-201607:49
scnpst64.dllscnpst64.dll14.0.7172.5000357,73612-Jul-201607:49
mapir.dll_1025mapir.dll14.0.71571,097,29613-Aug-201509:57
outllibr.dll_1025outllibr.dll14.0.71516,583,99214-May-201512:57
mapir.dll_1026mapir.dll14.0.71571,166,41613-Aug-201510:00
outllibr.dll_1026outllibr.dll14.0.71516,661,81614-May-201501:00
mapir.dll_1029mapir.dll14.0.71571,139,37613-Aug-201510:00
outllibr.dll_1029outllibr.dll14.0.71516,641,84814-May-201512:58
mapir.dll_1030mapir.dll14.0.71571,142,86413-Aug-201510:00
outllibr.dll_1030outllibr.dll14.0.71516,453,43214-May-201501:01
mapir.dll_1031mapir.dll14.0.71571,195,08813-Aug-201510:00
outllibr.dll_1031outllibr.dll14.0.71516,663,35214-May-201512:58
mapir.dll_1032mapir.dll14.0.71571,217,10413-Aug-201510:00
outllibr.dll_1032outllibr.dll14.0.71516,747,83214-May-201501:01
mapir.dll_1033mapir.dll14.0.7155.50001,126,57616-Jul-201508:58
outllibr.dll_1033outllibr.dll14.0.7147.50006,583,48019-Mar-201503:22
mapir.dll_3082mapir.dll14.0.71571,178,70413-Aug-201510:00
outllibr.dll_3082outllibr.dll14.0.71516,597,30414-May-201512:58
mapir.dll_1061mapir.dll14.0.71571,124,43213-Aug-201510:00
outllibr.dll_1061outllibr.dll14.0.71516,599,35214-May-201501:02
mapir.dll_1069mapir.dll14.0.71571,159,24813-Aug-201510:00
outllibr.dll_1069outllibr.dll14.0.71516,614,20014-May-201501:02
mapir.dll_1035mapir.dll14.0.71571,138,76813-Aug-201510:01
outllibr.dll_1035outllibr.dll14.0.71516,604,98414-May-201512:58
mapir.dll_1036mapir.dll14.0.71571,194,06413-Aug-201510:01
outllibr.dll_1036outllibr.dll14.0.71516,674,61614-May-201512:58
mapir.dll_1037mapir.dll14.0.71571,083,98413-Aug-201510:00
outllibr.dll_1037outllibr.dll14.0.71516,565,04814-May-201512:59
mapir.dll_1081mapir.dll14.0.71571,142,35213-Aug-201510:00
outllibr.dll_1081outllibr.dll14.0.71516,638,26414-May-201501:03
mapir.dll_1050mapir.dll14.0.71571,146,54413-Aug-201510:03
outllibr.dll_1050outllibr.dll14.0.71516,615,73614-May-201501:04
mapir.dll_1038mapir.dll14.0.71571,150,12813-Aug-201510:03
outllibr.dll_1038outllibr.dll14.0.71516,661,30414-May-201501:00
envelopr.dll_1040envelopr.dll14.0.700719,04814-Dec-201210:59
mapir.dll_1040mapir.dll14.0.71571,159,76013-Aug-201510:03
outllibr.dll_1040outllibr.dll14.0.71516,487,22414-May-201501:04
mapir.dll_1041mapir.dll14.0.71571,015,88813-Aug-201503:34
outllibr.dll_1041outllibr.dll14.0.71516,692,02413-May-201508:20
mapir.dll_1087mapir.dll14.0.71571,141,84013-Aug-201510:03
outllibr.dll_1087outllibr.dll14.0.71516,652,08814-May-201501:00
mapir.dll_1042mapir.dll14.0.71571,004,62413-Aug-201510:12
outllibr.dll_1042outllibr.dll14.0.71516,662,84014-May-201501:04
mapir.dll_1063mapir.dll14.0.71571,145,00813-Aug-201510:12
outllibr.dll_1063outllibr.dll14.0.71516,645,94414-May-201501:05
mapir.dll_1062mapir.dll14.0.71571,141,32813-Aug-201510:05
outllibr.dll_1062outllibr.dll14.0.71516,641,33614-May-201501:02
mapir.dll_1044mapir.dll14.0.71571,128,01613-Aug-201510:05
outllibr.dll_1044outllibr.dll14.0.71516,590,64814-May-201501:06
mapir.dll_1043mapir.dll14.0.71571,172,14413-Aug-201510:06
outllibr.dll_1043outllibr.dll14.0.71516,636,21614-May-201501:06
mapir.dll_1045mapir.dll14.0.71571,166,00013-Aug-201510:06
outllibr.dll_1045outllibr.dll14.0.71516,667,44814-May-201501:06
mapir.dll_1046mapir.dll14.0.71571,168,97613-Aug-201510:12
outllibr.dll_1046outllibr.dll14.0.71516,378,16814-May-201501:03
mapir.dll_2070mapir.dll14.0.71571,177,68013-Aug-201510:06
outllibr.dll_2070outllibr.dll14.0.71516,645,43214-May-201501:06
mapir.dll_1048mapir.dll14.0.71571,159,76013-Aug-201510:06
outllibr.dll_1048outllibr.dll14.0.71516,633,65614-May-201501:03
mapir.dll_1049mapir.dll14.0.71571,141,42413-Aug-201510:06
outllibr.dll_1049outllibr.dll14.0.71516,649,52814-May-201501:03
mapir.dll_1051mapir.dll14.0.71571,156,78413-Aug-201510:13
outllibr.dll_1051outllibr.dll14.0.71516,656,18414-May-201501:03
mapir.dll_1060mapir.dll14.0.71571,142,86413-Aug-201510:13
outllibr.dll_1060outllibr.dll14.0.71516,617,78414-May-201501:03
mapir.dll_2074mapir.dll14.0.71571,150,54413-Aug-201510:13
outllibr.dll_2074outllibr.dll14.0.71516,623,41614-May-201501:03
mapir.dll_1053mapir.dll14.0.71571,131,08813-Aug-201510:13
outllibr.dll_1053outllibr.dll14.0.71576,589,52813-Aug-201510:13
mapir.dll_1054mapir.dll14.0.71571,121,87213-Aug-201510:13
outllibr.dll_1054outllibr.dll14.0.71516,622,90414-May-201501:03
mapir.dll_1055mapir.dll14.0.71571,127,50413-Aug-201510:13
outllibr.dll_1055outllibr.dll14.0.71516,617,78414-May-201501:08
mapir.dll_1058mapir.dll14.0.71571,144,49613-Aug-201510:13
outllibr.dll_1058outllibr.dll14.0.71516,656,69614-May-201501:09
mapir.dll_2052mapir.dll14.0.7157958,03213-Aug-201510:13
outllibr.dll_2052outllibr.dll14.0.71516,552,76014-May-201501:05
outlook.hol_2052outlook.hol1,262,24422-Apr-201309:25
mapir.dll_1028mapir.dll14.0.7157958,64013-Aug-201510:13
outllibr.dll_1028outllibr.dll14.0.71516,545,08014-May-201501:08

For all supported x64-based versions of Outlook 2010

File identifierFile nameFile versionFile sizeDateTime
cnfnot32.exe_0004cnfnot32.exe14.0.7169.5000236,23212-Apr-201601:25
contab32.dllcontab32.dll14.0.7169.5000189,16820-Apr-201607:29
dlgsetp.dlldlgsetp.dll14.0.7169.5000127,72012-Apr-201601:25
emsmdb32.dll_0005emsmdb32.dll14.0.7172.50002,638,72013-Jul-201609:37
envelope.dllenvelope.dll14.0.7172.5000229,64012-Jul-201608:13
exsec32.dll_0001exsec32.dll14.0.7169.5000482,97620-Apr-201607:29
impmail.dllimpmail.dll14.0.7159.5000188,49602-Sep-201511:32
mapiph.dllmapiph.dll14.0.7169.5000432,44812-Apr-201601:25
mimedir.dllmimedir.dll14.0.7159.5000544,41602-Sep-201511:32
mspst32.dll_0004mspst32.dll14.0.7172.50001,634,16013-Jul-201609:37
olkfstub.dll.x64olkfstub.dll14.0.7159.5000261,72802-Sep-201511:32
olmapi32.dllolmapi32.dll14.0.7172.50004,648,70413-Jul-201609:37
omsmain.dllomsmain.dll14.0.7159.50001,099,87205-Sep-201512:27
omsxp32.dllomsxp32.dll14.0.7159.5000365,17605-Sep-201512:27
outlmime.dlloutlmime.dll14.0.7172.5000731,92012-Jul-201608:13
outlook.exeoutlook.exe14.0.7172.500024,141,00013-Jul-201609:37
outlph.dlloutlph.dll14.0.7172.5000387,88013-Jul-201609:37
outlvbs.dll_0001outlvbs.dll14.0.7169.500081,64012-Apr-201601:25
pstprx32.dllpstprx32.dll14.0.7172.5000440,52812-Jul-201608:13
recall.dllrecall.dll14.0.7159.500058,96002-Sep-201511:32
rm.dllrm.dll14.0.7169.5000109,78412-Apr-201601:25
rtfhtml.dllrtfhtml.dll14.0.7159.5000551,00005-Sep-201512:23
scanpst.exe_0002scanpst.exe14.0.7169.500057,16012-Apr-201601:25
scnpst32.dllscnpst32.dll14.0.7172.5000460,63212-Jul-201608:13
scnpst64.dllscnpst64.dll14.0.7172.5000458,60012-Jul-201608:13
mapir.dll_1025mapir.dll14.0.71571,095,85613-Aug-201509:36
outllibr.dll_1025outllibr.dll14.0.71516,579,38414-May-201512:42
mapir.dll_1026mapir.dll14.0.71571,166,41613-Aug-201509:41
outllibr.dll_1026outllibr.dll14.0.71516,657,20814-May-201512:42
mapir.dll_1029mapir.dll14.0.71571,140,81613-Aug-201509:38
outllibr.dll_1029outllibr.dll14.0.71516,637,24014-May-201512:42
mapir.dll_1030mapir.dll14.0.71571,141,42413-Aug-201509:37
outllibr.dll_1030outllibr.dll14.0.71516,448,82414-May-201512:43
mapir.dll_1031mapir.dll14.0.71571,195,08813-Aug-201509:38
outllibr.dll_1031outllibr.dll14.0.71516,658,74414-May-201512:45
mapir.dll_1032mapir.dll14.0.71571,217,10413-Aug-201509:40
outllibr.dll_1032outllibr.dll14.0.71516,743,73614-May-201512:46
mapir.dll_1033mapir.dll14.0.7155.50001,126,57616-Jul-201509:03
outllibr.dll_1033outllibr.dll14.0.7147.50006,578,86419-Mar-201503:22
mapir.dll_3082mapir.dll14.0.71571,178,70413-Aug-201509:40
outllibr.dll_3082outllibr.dll14.0.71516,592,69614-May-201512:45
mapir.dll_1061mapir.dll14.0.71571,124,43213-Aug-201509:40
outllibr.dll_1061outllibr.dll14.0.71516,594,74414-May-201512:45
mapir.dll_1069mapir.dll14.0.71571,159,24813-Aug-201509:40
outllibr.dll_1069outllibr.dll14.0.71516,609,59214-May-201512:46
mapir.dll_1035mapir.dll14.0.71571,138,76813-Aug-201509:38
outllibr.dll_1035outllibr.dll14.0.71516,600,37614-May-201512:47
mapir.dll_1036mapir.dll14.0.71571,194,06413-Aug-201509:38
outllibr.dll_1036outllibr.dll14.0.71516,670,00814-May-201512:47
mapir.dll_1037mapir.dll14.0.71571,083,98413-Aug-201509:38
outllibr.dll_1037outllibr.dll14.0.71516,560,44014-May-201512:46
mapir.dll_1081mapir.dll14.0.71571,142,35213-Aug-201509:40
outllibr.dll_1081outllibr.dll14.0.71516,633,65614-May-201512:47
mapir.dll_1050mapir.dll14.0.71571,147,98413-Aug-201509:41
outllibr.dll_1050outllibr.dll14.0.71516,611,12814-May-201512:47
mapir.dll_1038mapir.dll14.0.71571,150,12813-Aug-201509:42
outllibr.dll_1038outllibr.dll14.0.71516,657,20814-May-201512:47
envelopr.dll_1040envelopr.dll14.0.700719,04814-Dec-201210:38
mapir.dll_1040mapir.dll14.0.71571,159,76013-Aug-201509:45
outllibr.dll_1040outllibr.dll14.0.71516,482,61614-May-201512:47
mapir.dll_1041mapir.dll14.0.71571,015,88813-Aug-201503:42
outllibr.dll_1041outllibr.dll14.0.71516,687,92813-May-201508:22
mapir.dll_1087mapir.dll14.0.71571,140,40013-Aug-201509:42
outllibr.dll_1087outllibr.dll14.0.71516,647,48014-May-201512:47
mapir.dll_1042mapir.dll14.0.71571,004,62413-Aug-201509:45
outllibr.dll_1042outllibr.dll14.0.71516,658,23214-May-201512:47
mapir.dll_1063mapir.dll14.0.71571,146,44813-Aug-201509:45
outllibr.dll_1063outllibr.dll14.0.71516,641,33614-May-201512:47
mapir.dll_1062mapir.dll14.0.71571,141,32813-Aug-201509:45
outllibr.dll_1062outllibr.dll14.0.71516,636,72814-May-201512:47
mapir.dll_1044mapir.dll14.0.71571,128,01613-Aug-201509:45
outllibr.dll_1044outllibr.dll14.0.71516,586,04014-May-201512:47
mapir.dll_1043mapir.dll14.0.71571,172,14413-Aug-201509:45
outllibr.dll_1043outllibr.dll14.0.71516,632,12014-May-201512:47
mapir.dll_1045mapir.dll14.0.71571,167,44013-Aug-201509:45
outllibr.dll_1045outllibr.dll14.0.71516,662,84014-May-201512:46
mapir.dll_1046mapir.dll14.0.71571,168,97613-Aug-201509:46
outllibr.dll_1046outllibr.dll14.0.71516,373,56014-May-201512:47
mapir.dll_2070mapir.dll14.0.71571,177,68013-Aug-201509:47
outllibr.dll_2070outllibr.dll14.0.71516,640,82414-May-201512:50
mapir.dll_1048mapir.dll14.0.71571,159,76013-Aug-201509:47
outllibr.dll_1048outllibr.dll14.0.71516,629,04814-May-201512:48
mapir.dll_1049mapir.dll14.0.71571,141,42413-Aug-201509:47
outllibr.dll_1049outllibr.dll14.0.71516,644,92014-May-201512:51
mapir.dll_1051mapir.dll14.0.71571,158,22413-Aug-201509:47
outllibr.dll_1051outllibr.dll14.0.71516,652,08814-May-201512:49
mapir.dll_1060mapir.dll14.0.71571,142,86413-Aug-201509:47
outllibr.dll_1060outllibr.dll14.0.71516,613,17614-May-201512:49
mapir.dll_2074mapir.dll14.0.71571,150,54413-Aug-201509:47
outllibr.dll_2074outllibr.dll14.0.71516,618,80814-May-201512:49
mapir.dll_1053mapir.dll14.0.71571,129,64813-Aug-201509:47
outllibr.dll_1053outllibr.dll14.0.71576,583,48013-Aug-201509:47
mapir.dll_1054mapir.dll14.0.71571,121,87213-Aug-201512:21
outllibr.dll_1054outllibr.dll14.0.71516,618,29614-May-201512:51
mapir.dll_1055mapir.dll14.0.71571,127,50413-Aug-201509:47
outllibr.dll_1055outllibr.dll14.0.71516,613,17614-May-201512:50
mapir.dll_1058mapir.dll14.0.71571,145,93613-Aug-201509:47
outllibr.dll_1058outllibr.dll14.0.71516,652,08814-May-201512:50
mapir.dll_2052mapir.dll14.0.7157958,03213-Aug-201509:47
outllibr.dll_2052outllibr.dll14.0.71516,548,15214-May-201512:50
outlook.hol_2052outlook.hol1,262,24422-Apr-201309:25
mapir.dll_1028mapir.dll14.0.7157960,08013-Aug-201509:48
outllibr.dll_1028outllibr.dll14.0.71516,540,47214-May-201512:50

How to get help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support
Properties

Article ID: 3115474 - Last Review: 09/16/2016 23:51:00 - Revision: 3.0

Microsoft Office 2010 Service Pack 2

  • kbbug kbfix kbsurveynew kbexpertiseinter kbsecbulletin kbsecvulnerability atdownload kbsecurity KB3115474
Feedback