MS14-024: Vulnerability in a Microsoft common control could allow security feature bypass: May 13, 2014

INTRODUCTION

Microsoft has released security bulletin MS14-024. To learn more about this security bulletin:

• Home users:
  https:⁠//www.microsoft.com/security/pc-security/updates.aspx Skip the details: Download the updates for your home computer or laptop from the Microsoft Update website now:

  https:⁠//update.microsoft.com/microsoftupdate/

• IT professionals:
  https:⁠//technet.microsoft.com/security/bulletin/MS14-024

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Support and Troubleshooting

Help protect your Windows-based computer from viruses and malware: Virus and Security Solution Center

Local support according to your country:
International Support

          

Additional information about this security update

The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed under each article link.

• 2880508 MS14-024: Description of the security update for the 2007 Office suite Service Pack 3 (SP3): May 13, 2014
• 2880507 MS14-024: Description of the security update for the 2007 Office suite Service Pack 3 (SP3): May 13, 2014
• 2880502 MS14-024: Description of the security update for Office 2013: May 13, 2014
• 2817330 MS14-024: Description of the security update for the 2007 Office suite Service Pack 3 (SP3): May 13, 2014
• 2760272 MS14-024: Description of the security update for Office 2013: May 13, 2014
• 2880971 MS14-024: Description of the security update for Office 2010 Service Pack 1 (SP1) and Service Pack 2 (SP2): May 13, 2014
• 2810073 MS14-024: Description of the security update for Office 2010 Service Pack 1 (SP1) and Service Pack 2 (SP2): May 13, 2014
• 2596804 MS14-024: Description of the security update for the 2007 Office suite Service Pack 3 (SP3): May 13, 2014
• 2589288 MS14-024: Description of the security update for Office 2010 Service Pack 1 (SP1) and Service Pack 2 (SP2): May 13, 2014

File hash information

File name	SHA1 hash	SHA256 hash
msaddndr2007-kb2880508-fullfile-x86-glb.exe	7F1004B85D3C23E7B7993B656A7124D729A51444	7D6D53914424BB8A08F544DEB21124039575430E9D7071B79AC73AE5582DBB7F
msaddndr2010-kb2880971-fullfile-x64-glb.exe	9CFE8C16CBB22B6D410BD95955D376D0850BF0AB	FBDD9E5EF2F97576BE1AFFD0B31B8D3CFA0DAA2965AA581C488B1C24FC27F36E
mscomct22007-kb2596804-fullfile-x86-glb.exe	8F646535A6C965E0C0BF4C664B8FA5E962A0FAB0	C9F05A48914295987A601E30AD4332F703273D678891C1E478B3EE1125308C2D
mscomct22010-kb2589288-fullfile-x64-glb.exe	E37117287270191633D8DEDF8268A74467D59D0C	F3A3796C302C684A3A026E90AD38C7727E9B87E1B1B9AF6CBC6B7EC7265A03F7
mscomct22010-kb2589288-fullfile-x86-glb.exe	C3982A8A71AA1E4101C94930ECF803B8DD063893	DE7AE872306F831B047B5B634C31E1BD993B3275EDAB977045C25817D9A44369
mscomctlocx2007-kb2817330-fullfile-x86-glb.exe	0667E2301905B7823F5F34B0300D2D35C9CD3BBC	8B3938DEF3EA4A08E79312F9D8C1824418D9E3DFEB75D363109C81BB82C77FA4
mscomctlocx2010-kb2810073-fullfile-x86-glb.exe	43326ED9C91FF448A078DFA2E1041F60A4802639	0EAA2912390B24D8D485EC40BDCE60F0300C6435C21166F42967FA5E266478B3
msstdfmt2007-kb2880507-fullfile-x86-glb.exe	B22E194E3F7025E25CBBAE03D08E74EA8C220AF9	7C9EFD78774A391D2DBE5229C2009E34874F423CD67A045F67F59DB993E6B0A2