Sicherheitsupdate MS16-029 für Office 2007, 2010, 2013 und 2016 erschienen
Microsoft hat im Laufe des Abends ein kritisches Sicherheitsupdate für Office 2007, 2010, 2013 und Office 2016 veröffentlicht und zum sofortigen Download freigegeben. Mit diesem Sicherheitsupdate werden laut Microsoft einige Sicherheitslücken behoben. Die schwerwiegendste davon kann Remotecodeausführung ermöglichen, wenn Benutzer eine speziell gestaltete Microsoft Office-Datei öffnen. Das Sicherheitsupdate MS16-029 wurde am 12. Januar 2016 veröffentlicht und kann ab sofort sowohl über Microsoft Update als auch im Microsoft Download Center geladen werden. Weitere Informationen über das Sicherheitsupdate MS16-029 für Office 2007, 2010, 2013 und 2016 findet ihr im Microsoft Security Bulletin MS16-029.
Dieses Sicherheitsupdate behebt Sicherheitslücken in Microsoft Office. Die schwerwiegendste dieser Sicherheitslücken kann Remotecodeausführung ermöglichen, wenn ein Benutzer eine speziell gestaltete Microsoft Office-Datei öffnet. Ein Angreifer, der die Sicherheitslücken erfolgreich ausnutzt, kann beliebigen Code im Kontext des aktuellen Benutzers ausführen. Für Endbenutzer, deren Konten mit weniger Benutzerrechten konfiguriert sind, kann dies geringere Auswirkungen haben als für Benutzer, die mit administrativen Benutzerrechten arbeiten.
Download -> Office 2016 Updates vom 08. März 2016 herunterladen
Die Updates können über Microsoft Update oder im Microsoft Download Center geladen werden.
- Microsoft Office 2016 32-Bit-Edition (3114690)
- Microsoft Word 2016 32-Bit-Edition (3114855)
- Microsoft Word 2016 64-Bit-Edition (3114855)
Download -> Office 2013 Updates vom 08. März 2016 herunterladen
Die Updates können über Microsoft Update oder im Microsoft Download Center geladen werden.
- Microsoft Office 2013 Service Pack 1 32-Bit-Editionen (3039746)
- Microsoft InfoPath 2013 Service Pack 1 32-Bit-Editionen (3114833)
- Microsoft InfoPath 2013 Service Pack 1 64-Bit-Editionen (3114833)
- Microsoft Word 2013 Service Pack 1 32-Bit-Editionen (3114824)
- Microsoft Word 2013 Service Pack 1 64-Bit-Editionen (3114824)
Das Update für Office 2013 RT ist ausschließlich über Windows Update erhältlich.
Download -> Office 2010 Updates vom 08. März 2016 herunterladen
Die Updates können über Microsoft Update oder im Microsoft Download Center geladen werden.
- Microsoft Office 2010 Service Pack 2 32-Bit-Editionen (2956063)
- Microsoft Office 2010 Service Pack 2 32-Bit-Editionen (3114873)
- Microsoft Office 2010 Service Pack 2 64-Bit-Editionen (3114873)
- Microsoft InfoPath 2010 Service Pack 2 32-Bit-Editionen (3114414)
- Microsoft InfoPath 2010 Service Pack 2 64-Bit-Editionen (3114414)
- Microsoft Word 2010 Service Pack 2 32-Bit-Editionen (3114878)
- Microsoft Word 2010 Service Pack 2 64-Bit-Editionen (3114878)
Download -> Office 2007 Updates vom 08. März 2016 herunterladen
Die Updates können über Microsoft Update oder im Microsoft Download Center geladen werden.
- Microsoft Office 2007 Service Pack 3 (2956110)
- Microsoft InfoPath 2007 Service Pack 3 (3114426)
- Microsoft Word 2007 Service Pack 3 (3114901)
Download -> Weitere Office Updates vom 08. März 2016 herunterladen
Die Updates können über Microsoft Update oder im Microsoft Download Center geladen werden.
- Microsoft Office Compatibility Pack Service Pack 3 (3114900)
- Microsoft Word Viewer (3114812)
Alle Benutzer werden aufgefordert die verfügbaren Updates so schnell wie möglich zu installieren!
Nonsecurity-related fixes and improvements that are included in this security update
- Adds the Don't use HTML paragraph auto spacing option in Word 2013.
- Adds support for add-in commands to Outlook 2013.
- Updates startup information to better align with Cortana.
- Updates startup information for all international languages to better align with Cortana.
- Contains fixes for the following nonsecurity issues:
- After you add a continuous section break to a document in Word 2013, a lastRenderedPageBreak object is added.
- When you run VBA or an add-in to create multiple Word views on a document and manage the views in Word 2013, Word 2013 crashes.
- Assume that you have a document that has combo box content controls that are linked to custom XML parts in a document in Word 2016. After you select a value in one of these controls and then do an undo and a save operation, the type setting of some content controls is changed from combo box to rich text, and it loses the mapping to the node in the custom XML part.
- When you use a printer to print a document, and then you change to another printer programmatically in Word 2016, Word 2016 crashes.
- When you save a document as a PDF file in Word 2016, the content is broken in the PDF file.
- When you insert an online picture in a document in Word 2016, you receive an error message states that the picture cannot be inserted from a temporary Internet file location. Additionally, Word 2016 crashes.
- When you scroll HTML email messages in Outlook 2016 or Word 2016, Outlook 2016 or Word 2016 crashes.
- It takes a long time to update a content control in the XML Mapping control in Word 2016. This update improves performance for content controls in Word 2016.
- If the default input language is set to a language that is written by using Cyrillic characters, some keyboard shortcuts (for example, Ctrl+C and Ctrl+V) don't work in Word 2016.
- The WindowBeforeRightClick event doesn't fire when you right-click in a document in Word 2016.
- When you try to insert an HTML file as an object in a Microsoft Word 2016 document, you receive the following error message: The program used to create this object is html file. That program is either not installed on your computer or it is not responding. To edit this object, install html file or ensure that any dialog boxes in html file are closed.
- If you step through code (for example, by using the Step Into function) in a document in Word 2016, Word 2016 crashes.
- After you install updates for Word 2016, the Normal template (Normal.dotm) is renamed to Normal.dotm.old and a new Normal.dotm is created.
- There's insufficient memory or disk space to repaginate or print document in Word 2016.
- When you use ctx.trackedObjects.add() and you unload the apps without manually cleaning up the objects, Word 2016 automatically gracefully cleans up those objects before it unloads the apps.
- The Do Not Forward business bar information string is cropped and is not fully displayed in some non-English versions of Outlook 2016.
- A Universal Naming Convention (UNC) path that contains some full-width characters isn't resolved as a hyperlink in Word 2016.
- After you add a continuous section break to a document in Word 2016, a lastRenderedPageBreak object is added.
- If you use Visual Studio Tools for Office (VSTO) tools to run some code in a document in Word 2016, a user selection is lost in the document.
- The Don't use HTML paragraph autospacing compatibility option is unavailable to convert files in Word 2016.
- When you open an Outlook 2010 instance that has more than 30 calendars in a calendar view in a Citrix environment, Outlook 2010 crashes. To fix this issue, see KB3114809 for more information.
- Appointments that start and end on different days are displayed as multiple meetings in the Month view in Outlook 2010.
- When you view certain meeting cancelation email messages in the reading pane in Outlook 2013, Outlook 2013 crashes.
- When you use a mouse to open a new all-day appointment in Outlook 2013, Outlook 2013 crashes.
- When you try to set an account in Outlook 2016, Outlook 2016 takes longer than Outlook 2013 to collect autodiscover data for the account.
- When you scroll through some items in a message list in Outlook 2016, Window-Eyes stops the screen reader from working for Outlook 2016.
via MS16-029: Security Update for Microsoft Office to Address Remote Code Execution: March 8, 2016