This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if an attacker convinces a user to open or preview a specially crafted Microsoft Word file in an affected version of Office.
Improvements and fixes
This update also contains a fix for the following nonsecurity issues:- Assume that you define a hyperlink base in the file properties in a presentation by using Microsoft PowerPoint 2010. Then, you click a hyperlink that is directed to other slides in the presentation in slide mode. In this situation, the hyperlink does not work. Additionally, a Windows Explorer window opens, and it shows the path that you entered as your hyperlink base.
- After you apply a November 11, 2014, update for PowerPoint 2010, Document Inspector will be processed incorrectly. When this issue occurs, Document Inspector modules will not be displayed in the Document Inspector dialog box and in backstage localized versions of PowerPoint 2010.
- Assume that you apply a November 11, 2014, update for Microsoft PowerPoint 2010. In this situation, the ActivePresentation.RemoveDocumentInformation method will be broken when it passes a parameter to the ppRDIAll constant in the order management (OM) API call.
- Updates PowerPoint 2010 to work correctly with design changes that were made to the Microsoft Forms ActiveX Control (FM20.dll) shared component library. For more information, see the following Microsoft Knowledge Base article:3025036 "Cannot insert object" error in an ActiveX custom Office solution after you install the MS14-082 security update