Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. MS16-148: Security Update for Microsoft Office to Address Remote Code Execution: December 13, 2016

MS16-148: Security Update for Microsoft Office to Address Remote Code Execution: December 13, 2016

View products that this article applies to.

Summary

This security update resolves vulnerabilities in Microsoft Office. To learn more about the vulnerabilities, see Microsoft Security Bulletin MS16-148.

↑ Back to the top

More information about this security update

The following articles contain more information about this security update as it relates to individual product versions. These articles may contain known issue information.

Nonsecurity-related fixes and improvements that are included in this security update

  • Translate some terms into Slovak to make sure that the meaning is accurate.
  • When you insert content into cells in Microsoft Excel, Excel intermittently freezes on virtual machines and low-end devices.
  • When macros and some add-ins are included in operations to update the status bar text frequently, they are significantly slower in Office 2013 and 2016 than in earlier versions.
  • When you enable the desktop composition feature in Windows, Office 2013 application windows turn white.
  • When you rename a ribbon button that has a short command name through the customize ribbon dialog box, the command naming dialog box strips two special layout characters from the control name that's used in East Asian languages to control word breaking.
  • If you have content that's protected by IRM based on an admin template and the admin template is then archived, you can't do certain operations on it.
  • Skype for Business 2015 (Lync 2013) crashes during shutdown.
  • Translate some terms in multiple languages to make sure that the meaning is accurate.
  • When you run macro code to access the XML nodes in a custom XML part in a document in Microsoft Word 2016, you receive the following error message: 
    Run-time error -2147467259 (80004005): Reference to undeclared namespace prefix.

  • The check in, check out, and versioning functions don't work on a closed internal network with no Internet access. For example, when you try to check out a document, you receive the following error message:
    Microsoft Office cannot complete the operation because the network is unavailable. Check your network connection and try again.

  • After you close a document that's open in protected view in Excel 2016, Excel crashes.
  • When you send email message that have images in a high-DPI environment, the images are displayed in a larger size in a normal-DPI environment.
  • If you have content that's protected by IRM based on an admin template and the admin template is then archived, you can't do certain operations on the content.
  • Improve performance of rendering the custom filter list of items when the list contains long strings.
  • When a workbook is loaded in Microsoft SharePoint that has a PivotTable connected to a BISM file and it points to another workbook in the same farm, Power Pivot can't use some Korean DBCS characters in the formula bar.
  • It takes a long time to paste filtered selection data from large tables.
  • When an add-in or macro code tries to access a property on a shape control that no longer exists, Excel 2013 crashes. This update returns an error status instead of crashing.
  • For Excel 2016 and 2013, when you try to load HTML documents that contain <input/> tags in the protected view, you receive a corrupted file alert, and the documents can't be opened.
  • When you select cells by dragging on touch-enabled devices, Excel 2013 crashes because of interactions with accessibility (UIA) APIs that are on by default.
  • After you import a table that has multi-line columns and the Enhanced Rich Text function configured from SharePoint to Excel, the text in the multi-line columns is preceded by a blank line.
  • Improve performance of rendering the custom filter list of items when the list contains long strings.
  • When you use Excel 2016 with a printer that is added on the computer or with a printer that is accessible in a remote session, Excel 2016 crashes.
  • When you do a find-and-replace operation by using the clipboard marquee, you experience a slow performance.
  • When you switch single document interface (SDI) windows and select sheets in Excel 2016, Excel crashes.
  • Excel 2016 silently fails to complete loading a workbook. When this happens, the workbook may be functional, but you may be unable to save it.
  • When you try to load HTML documents that contain <input/> tags in the protected view, you receive a corrupted file alert, and the documents can't be opened.
  • It takes a long time to paste filtered selection data from large tables.
  • When an add-in or macro code tries to access a property on a shape control that no longer exists, Excel 2016 crashes. This update returns an error status instead of crashing.
  • The Solver Add-in fails to load.
  • This update makes handling of click events on embedded content more secure.

↑ Back to the top

More Information

Security update deployment information

Microsoft Office 2007 (all editions) and other software

Reference table

The following table contains the security update information for this software.
Security update file nameFor Microsoft Office 2007 Service Pack 3:
usp102007-kb2883033-fullfile-x86-glb.exe
For Microsoft Office 2007 Service Pack 3:
mso2007-kb3128020-fullfile-x86-glb.exe
For Microsoft Excel Services 2007 Service Pack 3:
xlsrvapp2007-kb3127892-fullfile-x86-glb.exe
For Microsoft Excel Services 2007 Service Pack 3:
xlsrvapp2007-kb3127892-fullfile-x64-glb.exe
For Microsoft Excel 2007 Service Pack 3:
excel2007-kb3128019-fullfile-x86-glb.exe
For Microsoft Office Compatibility Pack Service Pack 3:
xlconv2007-kb3128022-fullfile-x86-glb.exe
For Microsoft Office Compatibility Pack Service Pack 3:
wordconv2007-kb3128024-fullfile-x86-glb.exe
For Microsoft Excel Viewer:
xlview2007-kb3128023-fullfile-x86-glb.exe
For Microsoft Word 2007:
word2007-kb3128025-fullfile-x86-glb.exe
For Microsoft Word Viewer:
office2003-kb3127995-fullfile-enu.exe
For Microsoft Word Viewer:
office2003-kb3128043-fullfile-enu.exe
For Microsoft Word Viewer:
office-kb3128044-fullfile-enu.exe
Installation switchesSee Microsoft Knowledge Base Article 912203
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal informationUse the Add or Remove Programs item in Control Panel.
File informationSee Microsoft Knowledge Base Article 2883033
See Microsoft Knowledge Base Article 3127892
See Microsoft Knowledge Base Article 3128019
See Microsoft Knowledge Base Article 3128020
See Microsoft Knowledge Base Article 3128022
See Microsoft Knowledge Base Article 3128023
See Microsoft Knowledge Base Article 3128024
See Microsoft Knowledge Base Article 3128025
See Microsoft Knowledge Base Article 3127995
See Microsoft Knowledge Base Article 3128043
See Microsoft Knowledge Base Article 3128044
Registry key verificationNot applicable

Microsoft Office 2010 (all editions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor Microsoft Office 2010 Service Pack 2 (32-bit editions):
usp102010-kb2889841-fullfile-x86-glb.exe
For Microsoft Office 2010 Service Pack 2 (64-bit editions):
usp102010-kb2889841-fullfile-x64-glb.exe
For Microsoft Office 2010 Service Pack 2 (32-bit editions):
mso2010-kb3118380-fullfile-x86-glb.exe
For Microsoft Office 2010 Service Pack 2 (64-bit editions):
mso2010-kb3118380-fullfile-x64-glb.exe
For Microsoft Office 2010 Service Pack 2 (32-bit editions):
kb24286772010-kb3128032-fullfile-x86-glb.exe
For Microsoft Office 2010 Service Pack 2 (64-bit editions):
kb24286772010-kb3128032-fullfile-x64-glb.exe
For Microsoft Excel 2010 Service Pack 2 (32-bit editions):
excel2010-kb3128037-fullfile-x86-glb.exee
For Microsoft Excel 2010 Service Pack 2 (64-bit editions)
excel2010-kb3128037-fullfile-x64-glb.exe
For Microsoft Word 2010 Service Pack 2 (32-bit editions):
word2010-kb3128034-fullfile-x86-glb.exe
For Microsoft Word 2010 Service Pack 2 (64-bit editions)
word2010-kb3128034-fullfile-x64-glb.exe
For Microsoft Publisher 2010 Service Pack 2 (32-bit editions):
publisher2010-kb3114395-fullfile-x86-glb.exe
For Microsoft Publisher 2010 Service Pack 2 (64-bit editions)
publisher2010-kb3114395-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base Article 912203
Restart requirement In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal informationUse the Add or Remove Programs item in Control Panel.
File informationSee Microsoft Knowledge Base Article 3128037
See Microsoft Knowledge Base Article 2889841
See Microsoft Knowledge Base Article 3114395
See Microsoft Knowledge Base Article 3118380
See Microsoft Knowledge Base Article 3128032
See Microsoft Knowledge Base Article 3128034
Registry key verificationNot applicable

Microsoft Office 2013 (all editions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor Microsoft Office 2013 Service Pack 1 (32-bit editions)
mso2013-kb3127968-fullfile-x86-glb.exe
For Microsoft Office 2013 Service Pack 1 (64-bit editions)
mso2013-kb3127968-fullfile-x64-glb.exe
For Microsoft Excel 2013 Service Pack 1 (32-bit editions)
excel2013-kb3128008-fullfile-x86-glb.exe
For Microsoft Excel 2013 Service Pack 1 (64-bit editions)
excel2013-kb3128008-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base Article 912203
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal informationUse the Add or Remove Programs item in Control Panel.
File informationSee Microsoft Knowledge Base Article 3127968
See Microsoft Knowledge Base Article 3128008
Registry key verificationNot applicable

Microsoft Office 2013 RT (all editions)

DeploymentThe 3127968, 3128008 updates for Microsoft Office 2013 RT and its components are available via Windows Update.
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal informationClick Control Panel, click System and Security, and then click Windows Update. Under See also, click Installed updates, and then select from the list of updates.
File informationSee Microsoft Knowledge Base Article 3127968
See Microsoft Knowledge Base Article 3128008

Microsoft Office 2016 (all editions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor Microsoft Office 2016 (32-bit edition)
mso2016-kb3127986-fullfile-x86-glb.exe
For Microsoft Office 2016 (64-bit edition)
mso2016-kb3127986-fullfile-x64-glb.exe
For Microsoft Excel 2016 (32-bit edition)
excel2016-kb3128016-fullfile-x86-glb.exe
For Microsoft Excel 2016 (64-bit edition)
excel2016-kb3128016-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base Article 912203
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal informationUse the Add or Remove Programs item in Control Panel.
File informationSee Microsoft Knowledge Base Article 3127986
See Microsoft Knowledge Base Article 3128016
Registry key verificationNot applicable

Microsoft SharePoint Server 2010 (all editions)

Reference table
The following table contains the security update information for this software.
Security update file name

For Word Automation Services on supported editions of Microsoft SharePoint Server 2010 Service Pack 2:
wdsrv2010-kb3128026-fullfile-x64-glb.exe
For Excel Services on supported editions of Microsoft SharePoint Server 2010 Service Pack 2:
xlsrv2010-kb3128029-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base article 912203
Restart requirementAfter you install this security update on all SharePoint servers, you must run the PSconfig tool to complete the installation process. You may have to restart the computer after you install this security update. In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer. 

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update. 
See Why you may be prompted to restart your computer after you install a security update on a Windows-based computer for more information. 
Removal informationThis security update cannot be removed. 
File InformationSee Microsoft Knowledge Base article 3128026
See Microsoft Knowledge Base article 3128029
Registry key verificationNot applicable

Microsoft Office Web Apps 2010 (all versions)

Reference table

The following table contains the security update information for this software.
Security update file nameFor Microsoft Office Web Apps 2010 Service Pack 2:
wac2010-kb3128035-fullfile-x64-glb.exe
Installation switchesSee Microsoft Knowledge Base Article 912203
Restart requirementIn some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal informationThis security update cannot be removed.
File InformationSee Microsoft Knowledge Base Article 3128035
Registry key verificationNot applicable

Office for Mac 2011

Reference table

The following table contains the security update information for this software.
RequirementsOffice for Mac 2011 14.1.0 or a later version must be installed on your computer. Also, make sure that the computer is running Mac OS X 10.5.8 or a later version of the Mac OS X operating system.

To verify that the computer meets this prerequisite, click About This Mac on the Apple menu.

To verify that Office for Mac 2011 14.1.0 is installed on your computer, follow these steps:
  1. On the Go menu, click Applications.
  2. Open the Microsoft Office 2011 folder, and then start any Office application. (For example, start Microsoft Word).
  3. On the application menu, click About <application>.

    In the About <application> dialog box, notice the version number that is displayed. It should be 14.1.0 or a later version.

Previous VersionsIf you already have Office 2016 for Mac installed and you do not want to receive Office for Mac 2011 updates, follow the steps in Uninstall Office 2011 for Mac to remove Office for Mac 2011.
InstallationThis update is available from Microsoft AutoUpdate. AutoUpdate is provided together with Office. It automatically keeps Microsoft software up-to-date. To use AutoUpdate, start a Microsoft Office program, and then click Check for Updates on the Help menu.
File InformationSee Microsoft Knowledge Base Article 3198808
How to get help and support for this security update
Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

↑ Back to the top

Keywords: kbsurveynew, kbfix, kblist, kbbug, kbsecvulnerability, kblangall, kbsecbulletin, kbsecurity, kbmustloc, kbexpertiseinter, kb, kbsecreview

↑ Back to the top

Article Info
Article ID : 3204068
Revision : 2
Created on : 1/20/2017
Published on : 1/20/2017
Exists online : False
Views : 511