Introduction

This security update resolves vulnerabilities in Microsoft Office Server software that could allow remote code execution in the context of the W3WP service account.

Summary

Microsoft has released security bulletin MS13-067. To view the complete security bulletin, go to one of the following Microsoft websites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

More information about this security update

Known issues with this security update

After you install this security update on all SharePoint servers, you have to run the PSconfig tool to complete the installation. For more information about how to use the PSconfig tool, see PSconfig command-line reference (SharePoint Server 2010).

Prerequisites to apply this security update

To apply this security update, you must have Service Pack 1 or Service Pack 2 for Microsoft SharePoint Server 2010 installed on the computer.

Restart information

You may have to restart the computer after you install this security update.

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update.

See Why you may be prompted to restart your computer after you install a security update on a Windows-based computer for more information.

Removal information

This security update cannot be removed.

Security update replacement information

This security update replaces security update 2687421 for SharePoint Server 2010 Service Pack 1 (wosrv).

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

File name

File version

File size

Date

Time

Convert.asx

Not Applicable

4,303

22-May-2008

06:35

Editdlg.htm_dcl

Not Applicable

4,966

04-Apr-2012

09:43

Failure.asx

Not Applicable

2,749

15-Oct-2007

10:02

Filedlg.htm_dcl

Not Applicable

3,382

04-Apr-2012

09:43

Filtervaluespickerdialog_aspx

Not Applicable

2,693

01-Jul-2008

08:16

Microsoft.office.server.dll

14.0.7010.1000

1,874,528

15-Feb-2013

09:43

Microsoft.office.server.dll_isapi

14.0.7010.1000

1,874,528

15-Feb-2013

09:43

Microsoft.office.server.filtercontrols.dll

14.0.6108.5000

165,768

21-Jul-2011

04:21

Microsoft.office.server.native.dll

14.0.7005.1000

668,256

31-Oct-2012

07:25

Microsoft.office.server.openxml.dll

14.0.7104.5000

1,252,032

26-Jun-2013

04:26

Microsoft.resourcemanagement.dll

4.0.2450.49

760,456

15-Aug-2012

11:19

Office.odf

14.0.7101.5000

4,300,456

22-Apr-2013

03:33

Offxml.dll

14.0.7011.1000

516,264

06-Mar-2013

03:13

Osafehtm.dll

14.0.7104.5000

156,344

26-Jun-2013

03:22

Osrvintl.dll

14.0.7002.1000

236,192

11-Sep-2012

11:32

Publishedlinksservicedisco.aspx

Not Applicable

1,036

15-Oct-2007

10:02

Publishedlinksservicewsdl.aspx

Not Applicable

4,407

06-May-2008

10:13

Schema.xml_dcl

Not Applicable

40,301

17-Nov-2011

06:58

Socialdataservicedisco.aspx

Not Applicable

1,030

04-Dec-2007

10:47

Socialdataservicewsdl.aspx

Not Applicable

87,141

10-Dec-2009

02:38

Srpdfaul.asx

Not Applicable

1,495

05-Jan-2009

08:50

Sspadmin.mas

Not Applicable

29,079

30-Mar-2011

10:18

Succes.asx

Not Applicable

2,951

11-Apr-2009

04:56

Svrsetup.dll

14.0.7106.5000

7,321,256

24-Jul-2013

02:28

Svrsetup.exe

14.0.7101.5000

1,378,496

22-Apr-2013

06:46

Upload.aspx_dcl

Not Applicable

15,820

30-Mar-2011

10:20

Warning.asx

Not Applicable

3,942

08-May-2009

06:31


Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!

×