Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mskbMicrosoftKB3115094
HistoryMay 10, 2016 - 7:00 a.m.

MS16-054: Description of the security update for Word 2016: May 10, 2016

2016-05-1007:00:00
Microsoft
support.microsoft.com
35

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.704 High

EPSS

Percentile

98.1%

JSON

MS16-054: Description of the security update for Word 2016: May 10, 2016

Summary

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-054.

Note To apply this security update, you must have the release version of Word 2016 installed on the computer.

For a complete list of affected versions of Microsoft Office software, see Microsoft Knowledge Base article KB3155544.

Improvements and fixes

This security update contains improvements and fixes for the following nonsecurity issues:

  • This update adds support for Javanese Script.

  • Assume that you have a document that’s digitally signed and the document has controls that’s bound to the document metadata. After the document metadata is updated, Word 2016 still considers the document signature as valid.

  • Hebrew characters in footnote references are reversed in Word 2016.

  • When you paste mixed RTL and LTR plain text into a document in Word 2016, punctuation might appear on the wrong side of words.

  • Sometimes Word 2016 does not show a MacroButton field, and shows the following message instead:

Display text cannot span more than one line!

  • After you enable and disable Split window for a document that has an ActiveX control in Word 2016, Word 2016 crashes.

  • Word 2016 may crash if a list item begins with a diacritic, and the list uses a space (instead of a tab) for indentation.

  • After you compare or combine two versions of a document that are coauthored by different coauthors in Word 2016, all OLE objects are marked as changed.

  • Autocorrect changes incorrect characters in the presence of diacritic in Word 2016.

  • Sometimes Word 2016 shows numbers incorrectly when the Numeral setting is set to Context in the Word Option dialog box.

  • When you scroll through a document that has an ActiveX control in Word 2016, the ActiveX control is switched to design mode.

  • The Send as PDF function is unavailable in Reading mode in SharePoint Server 2016.

  • Some symbol characters are changed to “1” unexpectedly in the following scenarios:

    • You send a RTF format email message that contains some symbol characters in Outlook 2016.
    • You copy and paste some symbol characters in Word 2016.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see the “Turn on automatic updating in Control Panel” section of this Safety & Security Center article.

Method 2: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More Information

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base article KB3155544.

Security update replacement information

This security update doesn’t replace any previously released update.

File hash information

Package Name Package Hash SHA 1 Package Hash SHA 2
word2016-kb3115094-fullfile-x64-glb.exe BAB488B3FB7D59524C8FAEA172BF2A65EED15D9B 52F2AD4984887484B7351B948203EE8D26D682FB839FC4BAF524BD7F654FE75D
word2016-kb3115094-fullfile-x86-glb.exe 792E081CA156D02EDAC39E6E9FF1D2D8805D9B83 07A3F621F7A061E25751F293010C8DC18331165EC4A5BE53C23F8DA7E2A8DD18

__

File information

The English version of this security update has the file attributes (or later file attributes) that are listed in the following table.

For all supported x86-based versions of Word 2016File identifier File name File version File size Date Time
wwintl.dll_1026 wwintl.dll 16.0.4339.1000 818872 20-Apr-16 06:36
wwintl.dll_1030 wwintl.dll 16.0.4339.1000 805560 20-Apr-16 06:36
wwintl.dll_3082 wwintl.dll 16.0.4339.1000 845496 20-Apr-16 06:36
wwintl.dll_1061 wwintl.dll 16.0.4339.1000 769208 20-Apr-16 06:36
wwintl.dll_1050 wwintl.dll 16.0.4339.1000 828600 20-Apr-16 06:36
wwintl.dll_1038 wwintl.dll 16.0.4339.1000 884408 20-Apr-16 06:36
wwintl.dll_1040 wwintl.dll 16.0.4339.1000 836280 20-Apr-16 06:36
wwintl.dll_1041 wwintl.dll 16.0.4339.1000 788152 20-Apr-16 06:36
wwintl.dll_1087 wwintl.dll 16.0.4339.1000 878776 20-Apr-16 06:36
wwintl.dll_1044 wwintl.dll 16.0.4339.1000 794808 20-Apr-16 06:36
wwintl.dll_1045 wwintl.dll 16.0.4339.1000 850104 20-Apr-16 06:36
wwintl.dll_1046 wwintl.dll 16.0.4339.1000 851648 20-Apr-16 06:36
wwintl.dll_2070 wwintl.dll 16.0.4339.1000 859320 20-Apr-16 06:36
wwintl.dll_1048 wwintl.dll 16.0.4339.1000 894136 20-Apr-16 06:36
wwintl.dll_1049 wwintl.dll 16.0.4339.1000 807608 20-Apr-16 06:36
wwintl.dll_1060 wwintl.dll 16.0.4339.1000 819384 20-Apr-16 06:36
wwintl.dll_2074 wwintl.dll 16.0.4309.1000 806560 20-Apr-16 06:36
wwintl.dll_9242 wwintl.dll 16.0.4339.1000 815808 20-Apr-16 06:36
wwintl.dll_1054 wwintl.dll 16.0.4339.1000 822968 20-Apr-16 06:36
wwintl.dll_1055 wwintl.dll 16.0.4339.1000 879800 20-Apr-16 06:36
wwintl.dll_1058 wwintl.dll 16.0.4339.1000 818360 20-Apr-16 06:36
wwintl.dll_1066 wwintl.dll 16.0.4339.1000 911032 20-Apr-16 06:36
wwintl.dll_2052 wwintl.dll 16.0.4339.1000 694968 20-Apr-16 06:36
wwintl.dll_1028 wwintl.dll 16.0.4339.1000 703672 20-Apr-16 06:36
pdfreflow.exe pdfreflow.exe 16.0.4339.1000 10302160 21-Apr-16 04:50
wwintl.dll_1033 wwintl.dll 16.0.4309.1000 689312 19-Apr-16 01:42
winword.exe winword.exe 16.0.4378.1001 1936056 21-Apr-16 07:54
wrd12cnv.dll wordcnv.dll 16.0.4378.1001 9156280 21-Apr-16 07:54
wwlib.dll wwlib.dll 16.0.4378.1001 29566648 21-Apr-16 07:54
For all supported x64-based versions of Word 2016File identifier File name File version File size Date Time
— — — — — —
wdsrv.conversion.word.wwintl.dll_1025 wwintl.dll 16.0.4378.1001 942264 21-Apr-16 07:54
wwintl.dll_1025 wwintl.dll 16.0.4378.1001 942264 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1026 wwintl.dll 16.0.4378.1001 897720 21-Apr-16 07:54
wwintl.dll_1026 wwintl.dll 16.0.4378.1001 897720 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1029 wwintl.dll 16.0.4378.1001 953528 21-Apr-16 07:54
wwintl.dll_1029 wwintl.dll 16.0.4378.1001 953528 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1030 wwintl.dll 16.0.4378.1001 884408 21-Apr-16 07:54
wwintl.dll_1030 wwintl.dll 16.0.4378.1001 884408 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1031 wwintl.dll 16.0.4378.1001 964792 21-Apr-16 07:54
wwintl.dll_1031 wwintl.dll 16.0.4378.1001 964792 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1032 wwintl.dll 16.0.4378.1001 955064 21-Apr-16 07:54
wwintl.dll_1032 wwintl.dll 16.0.4378.1001 955064 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_3082 wwintl.dll 16.0.4378.1001 924344 21-Apr-16 07:54
wwintl.dll_3082 wwintl.dll 16.0.4378.1001 924344 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1061 wwintl.dll 16.0.4378.1001 848064 21-Apr-16 07:54
wwintl.dll_1061 wwintl.dll 16.0.4378.1001 848064 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1035 wwintl.dll 16.0.4378.1001 895168 21-Apr-16 07:54
wwintl.dll_1035 wwintl.dll 16.0.4378.1001 895168 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1036 wwintl.dll 16.0.4378.1001 960696 21-Apr-16 07:54
wwintl.dll_1036 wwintl.dll 16.0.4378.1001 960696 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1037 wwintl.dll 16.0.4378.1001 881336 21-Apr-16 07:54
wwintl.dll_1037 wwintl.dll 16.0.4378.1001 881336 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1081 wwintl.dll 16.0.4378.1001 942264 21-Apr-16 07:54
wwintl.dll_1081 wwintl.dll 16.0.4378.1001 942264 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1050 wwintl.dll 16.0.4378.1001 907448 21-Apr-16 07:54
wwintl.dll_1050 wwintl.dll 16.0.4378.1001 907448 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1038 wwintl.dll 16.0.4378.1001 963256 21-Apr-16 07:54
wwintl.dll_1038 wwintl.dll 16.0.4378.1001 963256 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1057 wwintl.dll 16.0.4378.1001 856248 21-Apr-16 07:54
wwintl.dll_1057 wwintl.dll 16.0.4378.1001 856248 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1040 wwintl.dll 16.0.4378.1001 915136 21-Apr-16 07:54
wwintl.dll_1040 wwintl.dll 16.0.4378.1001 915136 21-Apr-16 07:54
wac.word.wwintl.dll_1041 wwintl.dll 16.0.4378.1001 867000
wdsrv.conversion.word.wwintl.dll_1041 wwintl.dll 16.0.4378.1001 867000 21-Apr-16 07:54
wwintl.dll_1041 wwintl.dll 16.0.4378.1001 867000 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1087 wwintl.dll 16.0.4378.1001 957632 21-Apr-16 07:54
wwintl.dll_1087 wwintl.dll 16.0.4378.1001 957632 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1042 wwintl.dll 16.0.4378.1001 860344 21-Apr-16 07:54
wwintl.dll_1042 wwintl.dll 16.0.4378.1001 860344 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1063 wwintl.dll 16.0.4378.1001 914104 21-Apr-16 07:54
wwintl.dll_1063 wwintl.dll 16.0.4378.1001 914104 21-Apr-16 07:54
wdsrv.conversion.word.wwintl.dll_1062 wwintl.dll 16.0.4378.1001 901304 21-Apr-16 07:55
wwintl.dll_1062 wwintl.dll 16.0.4378.1001 901304 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1086 wwintl.dll 16.0.4378.1001 859832 21-Apr-16 07:55
wwintl.dll_1086 wwintl.dll 16.0.4378.1001 859832 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1044 wwintl.dll 16.0.4378.1001 873656 21-Apr-16 07:55
wwintl.dll_1044 wwintl.dll 16.0.4378.1001 873656 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1043 wwintl.dll 16.0.4378.1001 913088 21-Apr-16 07:55
wwintl.dll_1043 wwintl.dll 16.0.4378.1001 913088 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1045 wwintl.dll 16.0.4378.1001 929464 21-Apr-16 07:55
wwintl.dll_1045 wwintl.dll 16.0.4378.1001 929464 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1046 wwintl.dll 16.0.4378.1001 930488 21-Apr-16 07:55
wwintl.dll_1046 wwintl.dll 16.0.4378.1001 930488 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_2070 wwintl.dll 16.0.4378.1001 938168 21-Apr-16 07:55
wwintl.dll_2070 wwintl.dll 16.0.4378.1001 938168 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1048 wwintl.dll 16.0.4378.1001 973496 21-Apr-16 07:55
wwintl.dll_1048 wwintl.dll 16.0.4378.1001 973496 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1049 wwintl.dll 16.0.4378.1001 886456 21-Apr-16 07:55
wwintl.dll_1049 wwintl.dll 16.0.4378.1001 886456 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1051 wwintl.dll 16.0.4378.1001 968376 21-Apr-16 07:55
wwintl.dll_1051 wwintl.dll 16.0.4378.1001 968376 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1060 wwintl.dll 16.0.4378.1001 898232 21-Apr-16 07:55
wwintl.dll_1060 wwintl.dll 16.0.4378.1001 898232 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_2074 wwintl.dll 16.0.4378.1001 894648 21-Apr-16 07:55
wwintl.dll_2074 wwintl.dll 16.0.4378.1001 894648 21-Apr-16 07:55
wac.word.wwintl.dll_9242 wwintl.dll 16.0.4378.1001 894648
wdsrv.conversion.word.wwintl.dll_9242 wwintl.dll 16.0.4378.1001 894648 21-Apr-16 07:55
wwintl.dll_9242 wwintl.dll 16.0.4378.1001 894648 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1053 wwintl.dll 16.0.4378.1001 880312 21-Apr-16 07:55
wwintl.dll_1053 wwintl.dll 16.0.4378.1001 880312 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1054 wwintl.dll 16.0.4378.1001 902328 21-Apr-16 07:55
wwintl.dll_1054 wwintl.dll 16.0.4378.1001 902328 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1055 wwintl.dll 16.0.4378.1001 958656 21-Apr-16 07:55
wwintl.dll_1055 wwintl.dll 16.0.4378.1001 958656 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1058 wwintl.dll 16.0.4378.1001 897216 21-Apr-16 07:55
wwintl.dll_1058 wwintl.dll 16.0.4378.1001 897216 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1066 wwintl.dll 16.0.4378.1001 989880 21-Apr-16 07:55
wwintl.dll_1066 wwintl.dll 16.0.4378.1001 989880 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_2052 wwintl.dll 16.0.4378.1001 774328 21-Apr-16 07:55
wwintl.dll_2052 wwintl.dll 16.0.4378.1001 774328 21-Apr-16 07:55
wdsrv.conversion.word.wwintl.dll_1028 wwintl.dll 16.0.4378.1001 783040 21-Apr-16 07:55
wwintl.dll_1028 wwintl.dll 16.0.4378.1001 783040 21-Apr-16 07:55
pdfreflow.exe pdfreflow.exe 16.0.4339.1000 15915728 21-Apr-16 04:52
wac.word.wwintl.dll_1033 wwintl.dll 16.0.4309.1000 768672
wdsrv.conversion.word.wwintl.dll_1033 wwintl.dll 16.0.4309.1000 768672
wwintl.dll_1033 wwintl.dll 16.0.4309.1000 768672 21-Apr-16 04:47
winword.exe winword.exe 16.0.4378.1001 1939136 21-Apr-16 07:57
wrd12cnv.dll wordcnv.dll 16.0.4378.1001 11857088 21-Apr-16 07:57
wwlib.dll wwlib.dll 16.0.4378.1001 37173944 21-Apr-16 07:57

__

How to get help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Related

mskb 9
openvas 5
cvelist 1
cve 1
mscve 1
prion 1
nvd 1
symantec 1
nessus 2
threatpost 1
kaspersky 1
mskb
mskb
Security update 2016-05-10
2016-05-10 07:00:00
MS16-054: Description of the security update for Office 2016 for Mac: May 10, 2016
2016-05-10 07:00:00
Security update 2016-05-10
2016-05-10 07:00:00
openvas
openvas
Microsoft Office Remote Code Execution Vulnerability (3155544) - Mac OS X
2016-05-11 00:00:00
Microsoft Office Word Viewer Remote Code Execution Vulnerability (3155544)
2016-05-11 00:00:00
Microsoft Office Compatibility Pack Remote Code Execution Vulnerability (3155544)
2016-05-11 00:00:00
cvelist
cvelist
CVE-2016-0198
2016-05-11 01:00:00
cve
cve
CVE-2016-0198
2016-05-11 01:59:41
mscve
mscve
Microsoft Office Remote Code Execution Vulnerability
2016-05-10 07:00:00
prion
prion
Memory corruption
2016-05-11 01:59:00
nvd
nvd
CVE-2016-0198
2016-05-11 01:59:41
symantec
symantec
Microsoft Office CVE-2016-0198 Memory Corruption Vulnerability
2016-05-10 00:00:00
nessus
nessus
MS16-054: Security Update for Microsoft Office (3155544) (Mac OS X)
2016-05-11 00:00:00
MS16-054: Security Update for Microsoft Office (3155544)
2016-05-10 00:00:00
threatpost
threatpost
May 2016 Microsoft Patch Tuesday Security Bulletins
2016-05-10 15:03:31
kaspersky
kaspersky
KLA10804 Code execution vulnerabilities in Microsoft Office
2016-05-10 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.704 High

EPSS

Percentile

98.1%

JSON
Related for KB3115094
mskb9openvas5cvelist1cve1mscve1prion1nvd1symantec1nessus2threatpost1kaspersky1