MS16-070: Security Update for Office: June 14, 2016

Summary
This security update resolves a vulnerability in Microsoft Office. To learn more about the vulnerability, see Microsoft Security Bulletin MS16-070.
More information about this security update
The following articles contain more information about this security update as it relates to individual product versions. These articles may contain known issue information.

Nonsecurity-related fixes and improvements that are included in this security update

  • Contains fixes for the following nonsecurity issues:
    • Assume that .xls workbooks that contain hyperlinks were added or edited in any version of Excel in Windows 10. When you open the .xls workbooks in Excel 2010, the workbooks are corrupted.
    • If a file has shape texts that have only line feed as data, these text aren't populated when you open the file again in Visio 2013.
    • If a file has shape texts that have only line feed as data, these text aren't populated when you open the file again in Visio 2016.
    • When you open some Office 365 group email messages in Outlook 2016, Outlook 2016 may crash.
    • Nonbreaking hyphen is displayed as a square in some fonts in the Navigation pane.
    • Find and Replace doesn't highlight the first word that matches the search criteria.
    • When you drag some email messages from Outlook 2016 to Word 2016, Word 2016 and Outlook 2016 may stop responding.
    • When you drag some email messages from Outlook 2013 to Word 2013, Word 2013 and Outlook 2013 may stop responding.
    • Nonbreaking hyphen is displayed as a square in some fonts in the Navigation pane.
    • Find and Replace doesn't highlight the first word that matches the search criteria.
    • When you run an Outlook add-in to call the body.getAsync method on the Scheduling Assistant page in Outlook 2013, Outlook 2013 may crash.
    • When you convert a document that contains basic line shapes that have different line widths to a PDF or XPS file in Word 2013, the basic line shapes are displayed as having the same width.
More information

Security update deployment information

Microsoft Office 2007 (all editions) and Other Software

Reference table

The following table contains the security update information for this software.
Security update file nameFor Microsoft Excel 2007 Service Pack 3:
excel2007-kb3115107-fullfile-x86-glb.exe
For Microsoft Visio 2007 Service Pack 3:
visio2007-kb3114740-fullfile-x86-glb.exe
For Microsoft Word 2007 Service Pack 3:
word2007-kb3115195-fullfile-x86-glb.exe
For Microsoft OfficeCompatibility Pack:
wordconv2007-kb3115194-fullfile-x86-glb.exe
For Microsoft Office Compatibility Pack:
xlconv2007-kb3115111-fullfile-x86-glb.exe
For Microsoft Visio Viewer:
vviewer2007-kb2596915-fullfile-x86-glb.exe
For Microsoft Word Viewer:
office-kb3115187-fullfile-enu.exe
Installation switchesSee Microsoft Knowledge Base article 912203
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.
Removal informationUse Add or Remove Programs item in Control Panel.
File informationSee Microsoft Knowledge Base article 3115107
See Microsoft Knowledge Base article 3114740
See Microsoft Knowledge Base article 3115195
See Microsoft Knowledge Base article 3115194
See Microsoft Knowledge Base article 2596915
See Microsoft Knowledge Base article 3115111
See Microsoft Knowledge Base article 3115187
Registry key verificationNot applicable

Microsoft Office 2010 (all editions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor Microsoft Office 2010 Service Pack 2 (32-bit editions):
kb24286772010-kb3115198-fullfile-x86-glb.exe
For Microsoft Office 2010 Service Pack 2 (64-bit editions)
kb24286772010-kb3115198-fullfile-x64-glb.exe
For Microsoft Excel 2010 Service Pack 2 (32-bit editions):
excel2010-kb3115130-fullfile-x86-glb.exe
For Microsoft Excel 2010 Service Pack 2 (64-bit editions):
excel2010-kb3115130-fullfile-x64-glb.exe
For Microsoft Visio 2010 Service Pack 2 (32-bit editions):
visio2010-kb3114872-fullfile-x86-glb.exe
For Microsoft Visio 2010 Service Pack 2 (64-bit editions):
visio2010-kb3114872-fullfile-x64-glb.exe
For Microsoft Visio Viewer 2010: (32-bit editions):
vviewer2010-kb2999465-fullfile-x86-glb.exe
For Microsoft Visio Viewer 2010 (64-bit editions):
vviewer2010-kb2999465-fullfile-x64-glb.exe:
For Microsoft Word 2010 Service Pack 2 (32-bit editions):
word2010-kb3115243-fullfile-x86-glb.exe
For Microsoft Word 2010 Service Pack 2 (64-bit editions)
word2010-kb3115243-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base article 912203
Restart requirement In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.
To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.
Removal informationUse Add or Remove Programs item in Control Panel.
File informationSee Microsoft Knowledge Base article 2999465
See Microsoft Knowledge Base article 3114872
See Microsoft Knowledge Base article 3115130
See Microsoft Knowledge Base article 3115243
See Microsoft Knowledge Base article 3115198
Registry key verificationNot applicable

Microsoft Office 2013 (all editions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor Microsoft Visio 2013 Service Pack 1 (32-bit editions):
visio2013-kb3115020-fullfile-x86-glb.exe
For Microsoft Visio 2013 Service Pack 1 (64-bit editions):
visio2013-kb3115020-fullfile-x64-glb.exe
For Microsoft Word 2013 Service Pack 1 (32-bit editions):
word2013-kb3115173-fullfile-x86-glb.exe
For Microsoft Word 2013 Service Pack 1 (64-bit editions)
word2013-kb3115173-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base article 912203
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.
Removal informationUse Add or Remove Programs item in Control Panel.
File informationSee Microsoft Knowledge Base article 3115020
See Microsoft Knowledge Base article 3115173
Registry key verificationNot applicable

Microsoft Office 2013 RT (all editions)

DeploymentThe 3115173 update for Microsoft Word 2013 RT is available via Windows Update.
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.
Removal informationClick Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.
File informationSee Microsoft Knowledge Base article 3115173

Microsoft Office 2016 (all editions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor Microsoft Office 2016 (32-bit edition):
mso2016-kb3115144-fullfile-x86-glb.exe
For Microsoft Office 2016 (64-bit edition):
mso2016-kb3115144-fullfile-x64-glb.exe
For Microsoft Office OneNote 2016 (32-bit edition):
onenote2016-kb3114862-fullfile-x86-glb.exe
For Microsoft Office OneNote 2016 (64-bit edition):
onenote2016-kb3114862-fullfile-x64-glb.exe
For Microsoft Visio 2016 (32-bit editions):
visio2016-kb3115041-fullfile-x86-glb.exe
For Microsoft Visio 2016 (64-bit editions):
visio2016-kb3115041-fullfile-x64-glb.exe
For Microsoft Word 2016 (32-bit edition):
word2016-kb3115182-fullfile-x86-glb.exe
For Microsoft Word 2016 (64-bit edition):
word2016-kb3115182-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base article 912203
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.
Removal informationUse Add or Remove Programs item in Control Panel.
File informationSee Microsoft Knowledge Base article 3114862
See Microsoft Knowledge Base article 3115041
See Microsoft Knowledge Base article 3115144
See Microsoft Knowledge Base article 3115182
Registry key verificationNot applicable

Office for Mac 2011

The following security information applies to this software.

Prerequisites
  • Mac OS X version 10.5.8 or later version on an Intel processor
  • Mac OS X user accounts must have administrator privileges to install this security update
Installing the update

Download and install the appropriate language version of the Microsoft Office for Mac 2011 14.6.5 Update from the Microsoft Download Center.
  1. Quit any applications that are running, including virus-protection applications and all Microsoft Office applications as they could interfere with the installation.
  2. Open the Microsoft Office for Mac 2011 14.6.5. Update volume on your desktop. This step might have been performed for you.
  3. To start the update process, in the Microsoft Office for Mac 2011 14.6.5. Update volume window, double-click the Microsoft Office for Mac 2011. Update application, and follow the instructions on the screen.
  4. When the installation finishes successfully, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see Verifying Update Installation. To remove the update installer, first drag the Microsoft Office for Mac 2011 14.6.5. Update volume to the Trash, and then drag the file that you downloaded to the Trash.
Verifying Update Installation

To verify that a security update is installed on an affected system, follow these steps:
  1. In Finder, navigate to the Application Folder (Microsoft Office 2011).
  2. Select Word, Excel, PowerPoint or Outlook and launch the application.
  3. On the application menu, click About Application_Name (where Application_Name is Word, Excel, PowerPoint or Outlook).
If the Latest Installed Update Version number is 14.6.5, the update has been successfully installed.

Restart Requirement

This update does not require you to restart your computer.

Removing the Update

This security update cannot be uninstalled.

Additional Information

If you have technical questions or problems downloading or using this update, see Microsoft for Mac Support to learn about the support options that are available to you.

Office 2016 for Mac

The following security information applies to this software.

Prerequisites
  • Mac OS X Yosemite 10.10 or later version on an Intel processor
  • A valid Microsoft Office 365 subscription
Installing the Update

Download and install the appropriate language version of the Microsoft Office 2016 for Mac 15.23.0 Update from KB3165798.
  1. Quit any applications that are running, including virus-protection applications and all Microsoft Office applications as they could interfere with the installation.
  2. Open the Microsoft Office 2016 for Mac 15.23.0. Update volume on your desktop. This step might have been performed for you.
  3. To start the update process, in the Microsoft Office 2016 for Mac 15.23.0. Update volume window, double-click the Microsoft Office 2016 for Mac 15.23.0. Update application, and follow the instructions on the screen.
  4. When the installation finishes successfully, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see Verifying Update Installation. To remove the update installer, first drag the Microsoft Office 2016 for Mac 15.23.0. Update volume to the Trash, and then drag the file that you downloaded to the Trash.
Verifying Update Installation

To verify that a security update is installed on an affected system, follow these steps:
  1. In Finder, navigate to the Application Folder (Microsoft Office 2016).
  2. Select Word, Excel, PowerPoint or Outlook and launch the application.
  3. On the application menu, click About Application_Name (where Application_Name is Word, Excel, PowerPoint or Outlook).
If the Latest Installed Update Version number is 15.23.0, the update has been successfully installed.

Restart Requirement

This update does not require you to restart your computer.

Removing the Update

This security update cannot be uninstalled.

Additional Information

If you have technical questions or problems downloading or using this update, see Microsoft for Mac Support to learn about the support options that are available to you.

Microsoft SharePoint Server 2010 (all editions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor Word Automation Services on supported editions of Microsoft SharePoint Server 2010 Service Pack 2:
wdsrv2010-kb3115196-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base article 912203
Restart requirementAfter you install this security update on all SharePoint servers, you must run the PSconfig tool to complete the installation process.
You may have to restart the computer after you install this security update.
In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update.
See Why you may be prompted to restart your computer after you install a security update on a Windows-based computer for more information.
Removal informationThis security update cannot be removed.
File InformationSee Microsoft Knowledge Base article 3115196
Registry key verificationNot applicable

Microsoft SharePoint Server 2013 (all editions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor Word Automation Services on supported editions of Microsoft SharePoint Server 2013 Service Pack 2:
wdsrvloc2013-kb3115014-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base article 912203
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.
Removal informationThis security update cannot be removed.
File InformationSee Microsoft Knowledge Base article 3115014
Registry key verificationNot applicable

Microsoft Office Web Apps 2010 (all versions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor Microsoft Office Web Apps 2010 Service Pack 2:
wac2010-kb3115244-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base article 912203
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.
Removal informationThis security update cannot be removed.
File InformationSee Microsoft Knowledge Base article 3115244
Registry key verificationNot applicable

Microsoft Office Web Apps 2013 (all versions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor all supported editions of Microsoft Office Web Apps Server 2013 Service Pack 2:
wacserver2013-kb3115170-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base article 912203
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.
Removal informationThis security update cannot be removed.
File InformationSee Microsoft Knowledge Base article 3115170
Registry key verificationNot applicable

Office Online Server

Reference table

The following table contains the security update information for this software.
Security update file nameFor all supported editions of Office Online Server:
wacserver2016-kb3115134-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base article 912203
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.
Removal informationThis security update cannot be removed.
File InformationSee Microsoft Knowledge Base article 3115134

How to get help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support
update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE
Properties

Article ID: 3163610 - Last Review: 08/16/2016 02:41:00 - Revision: 2.0

Microsoft Office Home and Business 2016, Microsoft Office Home and Student 2016, Microsoft Office Personal 2016, Microsoft Office Professional 2016, Microsoft Office Professional Plus 2016, Microsoft Office Standard 2016, OneNote 2016, Visio Professional 2016, Visio Standard 2016, Word 2016, Microsoft Office 2013 Service Pack 1, Microsoft Office Web Apps Server 2013 Service Pack 1, Microsoft SharePoint Server 2013 Service Pack 1, Microsoft Visio 2013 Service Pack 1, Microsoft Word 2013, Microsoft Excel 2010, Microsoft Office 2010 Service Pack 2, Microsoft SharePoint Server 2010 Service Pack 2, Microsoft Visio 2010 Service Pack 2, Microsoft Visio 2010 Viewer, Microsoft Word 2010, Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats, Microsoft Office Excel 2007, Microsoft Office Excel 2007 (Home and Student version), Microsoft Office Visio 2007 Service Pack 3, Microsoft Office Visio Viewer 2007, Microsoft Office Word 2007, Microsoft Office Word 2007 (Home and Student version), Microsoft Office Web Apps Service Pack 2, Word Viewer, Microsoft Office Online Server

  • kbexpertiseinter kbsecurity kbsecbulletin kbsecvulnerability kbbug kblist kbfix kbsurveynew KB3163610
Feedback