MS12-051: Vulnerability in Microsoft Office for Mac could allow elevation of privilege: July 10, 2012

INTRODUCTION

Microsoft has released security bulletin MS12-051. This security bulletin contains all the relevant information about the security update for Microsoft Office for Mac 2011. To view the complete security bulletin, visit the following Microsoft website:

Update details

A security vulnerability exits in the way that folder permissions are set in certain Microsoft Office 2011 for Mac 14.2 installations. This update resolves that vulnerability.

Improvements that are included in the update

The Office for Mac 2011 14.2.3 Update also includes the following improvements:

Improvements for Excel for Mac 2011

Improvements for Outlook for Mac 2011

  • This update fixes some issues where certain IMAP configurations repeatedly displayed “Cannot create mailbox,” “unknown namespace” or “1025” errors. BUG #: 255862 (MacBU Main Bugbase)BUG #: 255978 (MacBU Main Bugbase)
  • This update fixes an issue that causes Outlook not to display details for certain contacts when Lync or Communicator is running. BUG #: 254798 (MacBU Main Bugbase)
  • This update fixes a problem that occurs when users reply to or forward Exchange email messages that were downloaded from Exchange 2007 servers. When this problem occurs, the Date field is missing from the body of the message.

    To correct email messages that have already been cached, right-click the folder that contains the email messages, select Folder Properties, and then then select Empty under Empty Cache. Or, you can delete the Exchange account and then add it again to resynchronize the account. BUG #: 255848 (MacBU Main Bugbase)
  • This update fixes an issue where users may have duplication of mail when they use Gmail and connect with Outlook by using IMAP. This issue requires users to be subscribed to the Gmail All Mail folder and to have, move or copy rules that are triggered by new mail appearing in the All Mail folder. BUG #: 255859 (MacBU Main Bugbase)
  • This update fixes an issue where some users who have IMAP accounts intermittently receive a “Too many simultaneous connections” error. A setting is now available to control the polling interval that Outlook uses with IMAP servers.

    To adjust this setting, select Tools, select Accounts, and then select Advanced for the IMAP account. The setting defaults to synchronize all lMAP folders every two minutes. BUG #: 255863 (MacBU Main Bugbase)
  • This update fixes a connectivity issue that occurs when Outlook connects through a proxy server that uses NTLM based authentication. BUG #: 256031 (MacBU Main Bugbase)

Improvements to Word for Mac 2011

Previously released improvements included in this update

This update includes all the improvements that were released in all previous Office 2011 updates since the release of the Microsoft Office for Mac 2011 14.1.0 Update . For more information about the improvements in a previous update, click the following article number to view the article in the Microsoft Knowledge Base:
2555784 Description of the Microsoft Office for Mac 2011 14.1.2 Update

2598783 Description of the Microsoft Office for Mac 2011 14.1.3 Update

2644347 Description of the Microsoft Office for Mac 2011 14.1.4 Update

2685940 Description of the Microsoft Office for Mac 2011 14.2.0 Update

2705358 Description of the Microsoft Office for Mac 2011 14.2.1 Update

2665351 Description of the Microsoft Office for Mac 2011 14.2.2 Update

Prerequisites

Before you install the Office 2011 14.2.3 Update, make sure that the computer is running Mac OS X v10.5.8 or a later version of the Mac OS X operating system.

To verify that the computer meets this prerequisite, click About This Mac on the Apple menu.

Additionally, you must install the Microsoft Office for Mac 2011 14.1 Update before you install the Office for Mac 2011 14.2.3 Update.

To verify that the update that is installed on your computer, follow these steps:
  1. On the Go menu, click Applications.
  2. Open the Microsoft Office 2011 folder, and then open any Office application (for example, open Word).
  3. On the Word menu, click About Word.
  4. In the About Word dialog box, compare the version number next to Latest Installed Update.

How to obtain the update

The following file is available for download from the Microsoft Download Center:

Download Download the Microsoft Office for Mac 14.2.3 Update package now.

Release Date: July 10, 2012

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Updated files

For a complete list of the files that this update adds or changes, double-click the update installer. Then, on the File menu, click Show Files.
Notes
  • The Office 2011 14.2.3 Update is also available from Microsoft AutoUpdate. AutoUpdate is a program that automatically keeps Microsoft software up-to-date.

    To use AutoUpdate, start a Microsoft Office program. Then, on the Help menu, click Check for Updates.

    For more information about resources for Office for Mac 2011, visit the following Microsoft website:

File hash information

File nameSHA1 hashSHA256 hash
Office2011-1423UpdateEN.dmg85A53CF30D4E80C218BC260596E75FA58FD9A6715B14B7D6296F4449B277A0FD27FCE723341CBDD6BB49CD3872B85183FFA87F53

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Egenskaper

Artikkel-ID: 2721015 – Forrige gjennomgang: 25. feb. 2015 – Revisjon: 1

Tilbakemelding