MS16-004: Description of the security update for Word 2013: January 12, 2016

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-004.

Note To apply this security update, you must have the release version of Service Pack 1 for Office 2013 installed on the computer.

For a complete list of affected versions of Microsoft Office software, see Microsoft Knowledge Base article 3124585.

Improvements and fixes

This update also contains fixes for the following nonsecurity issues:

• When you try to insert an HTML file as an object in a Microsoft Word 2013 document, you receive the following error message:
  
  The program used to create this object is html file. That program is either not installed on your computer or it is not responding. To edit this object, install html file or ensure that any dialog boxes in html file are closed.
• If the default input language is set to a language that is written by using Cyrillic characters, some keyboard shortcuts (for example, Ctrl+C and Ctrl+V) don't work in Word 2013.
  
• AUniversal Naming Convention (UNC) path that contains some full-width characters isn't resolved as a hyperlink in Word 2013.
  
• It takes a long time to update the custom XML in the XML Mapping pane in Word 2013.