This update resolves vulnerabilities in Microsoft Office Web Apps Server 2013 that could allow remote code execution if an authenticated attacker sends specially crafted page content to a targeted computer that is running Microsoft SharePoint Server.
Improvements and fixes
This update also contains fixes for the following nonsecurity issues:- Assume that you install Microsoft SharePoint Server 2013 or SharePoint Server 2013 Service Pack 1 (SP1) and that you also install Office Web Apps 2013 or Office Web Apps 2013 SP1. When you open an attached .pdf file by using Office Web Apps 2013, some images may be missing in the file.
- Assume that you open an Information Rights Management (IRM)-protected Microsoft Office document by using Microsoft mobile view of Office Web Apps 2013 on iPhone. In this situation, you can unexpectedly perform a copy and paste operation in the document.