MS13-067: Description of the security update for Excel Web App: September 10, 2013

View products that this article applies to.

Introduction

This security update resolves vulnerabilities in Microsoft Office server software that could allow remote code execution in the context of the W3wp.exe process service account.

↑ Back to the top

Summary

Microsoft has released security bulletin MS13-067. To view the complete security bulletin, go to one of the following Microsoft websites:

Home users:
http://www.microsoft.com/security/pc-security/updates.aspx
Skip the details: Download the updates for your home computer or laptop from the Microsoft Update website now:
http://update.microsoft.com/microsoftupdate
IT professionals:
http://technet.microsoft.com/security/bulletin/MS13-067

↑ Back to the top

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

↑ Back to the top

More information about this security update

↑ Back to the top

Prerequisites to apply this security update

To apply this security update, you must have Service Pack 1 or Service Pack 2 for Microsoft Office Web App installed on the computer.

↑ Back to the top

Restart information

You may have to restart the computer after you install this security update.

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update.

See Why you may be prompted to restart your computer after you install a security update on a Windows-based computer for more information.

↑ Back to the top

Removal information

This security update cannot be removed.

↑ Back to the top

Security update replacement information

This security update does not replace any previous security update.

↑ Back to the top

File information

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

File name	File version	File size	Date	Time
Dynamicgridcontent.asmx	Not applicable	313	12-Feb-2008	12:44
Ecscalcserver.dll	14.0.6112.5000	636,784	12-Oct-2011	11:50
Ewabrowsercompat.js	Not applicable	6,565	05-Nov-2009	11:47
Ewachart.png	Not applicable	91,313	29-Mar-2011	11:15
Ewacmdui.xml	Not applicable	116,740	30-Mar-2011	03:13
Ewainternalwebservice.asmx	Not applicable	322	12-Feb-2008	12:44
Ewamoss.js	Not applicable	786,371	09-Jan-2013	11:36
Ewanewwpctrl.ascx	Not applicable	2,202	15-Jun-2009	01:07
Ewaparameterstaskpane.ascx	Not applicable	1,511	28-Sep-2009	09:29
Ewareadmodetoolbar.ascx	Not applicable	3,963	30-Mar-2011	03:13
Ewastringshandler.ashx	Not applicable	317	22-Nov-2012	08:59
Ewrdynamicimageprovider.aspx	Not applicable	433	02-Jun-2009	11:56
Ewrdynamicslicerprovider.aspx	Not applicable	529	02-Jun-2009	11:56
Ewrtreeview.js	Not applicable	19,012	15-Jun-2009	01:08
Ewrxlfilehandler.aspx	Not applicable	421	02-Jun-2009	11:56
Ewrxlviewer.aspx	Not applicable	9,316	30-Mar-2011	03:17
Ewrxlviewerinternal.aspx	Not applicable	13,540	30-Mar-2011	03:17
Excelservercreateapplication.aspx	Not applicable	5,364	04-Sep-2009	05:03
Excelserversafedataprovider.aspx	Not applicable	6,188	20-Sep-2008	08:29
Excelserversafedataproviders.aspx	Not applicable	5,219	20-Sep-2008	08:29
Excelserversettings.aspx	Not applicable	10,724	21-Apr-2009	11:42
Excelservertrusteddcl.aspx	Not applicable	5,753	20-Jan-2009	03:23
Excelservertrusteddcls.aspx	Not applicable	5,196	20-Sep-2008	08:30
Excelservertrustedlocation.aspx	Not applicable	11,928	04-Sep-2009	05:03
Excelservertrustedlocations.aspx	Not applicable	5,213	20-Sep-2008	08:30
Excelserveruserdefinedfunction.aspx	Not applicable	6,048	20-Jan-2009	03:24
Excelserveruserdefinedfunctions.aspx	Not applicable	5,229	20-Sep-2008	08:30
Excelservicesadmin.aspx	Not applicable	5,861	20-Jan-2009	03:24
Excelwebrenderer.ascx	Not applicable	4,877	30-Mar-2011	03:13
Inputformexcelserversetting.ascx	Not applicable	2,777	21-Feb-2008	11:42
Mewadynamicimageprovider.aspx	Not applicable	433	02-Jun-2009	11:56
Microsoft.office.excel.webui.internal.dll	14.0.7006.1000	641,640	22-Nov-2012	09:18
Microsoft.office.excel.webui.mobile.dll	14.0.7005.1000	113,224	01-Nov-2012	08:03
Slicerrenderer.ascx	Not applicable	7,687	05-Nov-2009	11:44
Xlsrv.dll	14.0.7104.5000	14,652,600	29-Jun-2013	05:52
Xlsrvintl.dll.1033	14.0.7104.5000	106,176	26-Jun-2013	03:34