Описание
Microsoft Office Defense in Depth Update
Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure.
FAQ
1. How should this update be deployed?
The update can be applied from Microsoft Update or the Download Center to existing Office installations by following the links in the KB articles listed in the Affected Products table. In addition, the update can be deployed in a new installation of Office by placing the Office setup files in the Updates folder in the Office installation image as follows:
Download OfficeSetupFiles2.zip from the following link: OfficeSetupFiles.
Extract the files from OfficeSetupFiles2.zip. There are x86 and x64 versions of OSE.EXE and OSETUP.DLL for Office 2013 and Office 2016, and OSE.EXE, OSETUP.DLL, and PSETUP.DLL for Office 2010.
Copy the files for the appropriate Office version and architecture into the Updates folder in the installation image. If the Updates folder already contains older versions of the same files, replace the old files with the new ones.
Extract the .msp patch files from the download EXEs linked in the Affected Products table and place them in the Updates folder in the installation image by following these steps:
Download the EXE files for the desired Office version listed in the Affected Products table.
At the command prompt, type the name of the download EXE with the /extract switch and the path to where you want to extract the files. For example:
osetup2013-kb4011254-fullfile-x86-glb.exe /extract:"c:\ExtractFiles"Copy the extracted .msp files to the Updates folder in the installation image. If the Updates folder already contains older versions of the same files, replace the old files with the new ones.
Install Office.
Note: If you are installing the original release of Office 2010 or 2013, and not the service pack re-release, then you must also include the service pack .msp files in the Updates folder of the installation image. Do this as follows:
Download Office 2010 Service Pack 2 or Office 2013 Service Pack 1 from the following links:
Extract the .msp patch files from the service pack download EXEs and place them in the Updates folder, following the instructions in step 4 in the preceding section.
2. Are there any other mitigations for installing Office products that I should be aware of?
Yes. To use Microsoft Office self-extracting executable installers (.exe files), such as Office tools and updates downloaded from the Microsoft Download Center, in a safe manner Microsoft recommends that you:
- Create a new empty directory and restrict permissions to the directory so that only administrators can modify it.
- Download or copy the self-extracting installer to the directory.
- Run the installer from the directory.
For Click-to-Run versions of Office 2013 and 2016:
Use the most recent version of the Office Deployment Tool for Click-to-Run, which can be downloaded from the following locations:
Обновления
Продукт | Статья | Обновление |
---|---|---|
Microsoft Office 2010 Service Pack 2 (32-bit editions) | ||
Microsoft Office 2010 Service Pack 2 (64-bit editions) | ||
Microsoft Office 2013 Service Pack 1 (32-bit editions) | -- | |
Microsoft Office 2013 Service Pack 1 (64-bit editions) | -- | |
Microsoft Office 2013 RT Service Pack 1 | -- | |
Microsoft Office 2016 (32-bit edition) | ||
Microsoft Office 2016 (64-bit edition) |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
Older Software Release
DOS