Microsoft Office 2011 14.7.7 (Update)

What's new in this version:

Microsoft Office for Mac 2011 14.7.7 (Update)
- This update fixes critical issues and also helps to improve security. It includes fixes for vulnerabilities that an attacker can use to overwrite the contents of your computer's memory with malicious code
- To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2017-8631, CVE-2017-8632, and CVE-2017-8742

Microsoft Office for Mac 2011 14.7.6 (Update)
- This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file

Microsoft Office for Mac 2011 14.7.5 (Update)
- This update fixes critical issues and also helps to improve security. It includes fixes for vulnerabilities that an attacker can use to overwrite the contents of your computer's memory with malicious code. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2017-8509 and CVE-2017-8511
- A remote code execution vulnerability exist in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could then, for example, take actions on behalf of the logged-on user with the same permissions as the current user. Exploitation of this vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software
- In an email attack scenario an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file. In a web-based attack scenario an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince them to open the specially crafted file
- The security update addresses the vulnerability by correcting how Microsoft Office handles files in memory

Microsoft Office for Mac 2011 14.7.4 (Update)
- This update fixes critical issues and also helps to improve security. It includes fixes for vulnerabilities that an attacker can use to overwrite the contents of your computer's memory with malicious code

Microsoft Office for Mac 2011 14.7.3 (Update)
- This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file
- To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2017-0207 at https://portal.msrc.microsoft.com/en-US/security-guidance

Microsoft Office for Mac 2011 14.7.2 (Update)
NONSECURITY-RELATED FIXES AND IMPROVEMENTS THAT ARE INCLUDED IN THIS SECURITY UPDATE:
- Improves memory consumption for Microsoft Word 2013.
- Improves the translation for the VLOOKUP function and an incorrect caption when you delete a sheet in Microsoft Excel 2016.
- Adds an option to disable automatic grouping of date and time columns in PivotTables in Microsoft Excel 2016.
- Improves memory consumption for Word 2016.

Contains fixes for the following nonsecurity issues:
- When you use the Allow Users to Edit Ranges function to add a user to a range of data in Excel 2007, 2010, 2013, or 2016, Excel may crash.
- When you save a workbook that has future metadata in cells with Boolean or error values in Excel 2010, Excel may crash. Alternatively, the future metadata in cells with Boolean or error values may be corrupted.
- When you copy and paste a range of data that includes external links cross workbooks in Excel 2010, Excel 2010 may crash.
- When you save a file that has certain future content created in later versions of Excel in Excel 2013 or 2010, Excel may crash.
- Running VBA macros that involve hidden workbooks may be slow in Excel 2013.
- When you enable macros in Excel 2013 on a touch-enabled device, Excel may crash.
- When you try to open a document that has a Lotus Notes link (such as notes://xxx) in Office Web Apps, you receive one of the following error messages depending on whether the document should be viewed or edited, and the document can't be opened.
- You'll need a new app to open this blocked [sic]
- The installation of Office Web Apps Server fails in Windows Server 2012 R2 with the .NET Framework 4.6.1 installed.
- When you browse to the action links of a question or answer (such as the Edit or Reply link) in a discussions list, no context of that message appears in the action links. Therefore, screen readers can't detect the context of the message that you focus on. The update adds a simple text string to all action links that are part of the message body.
- In an announcements list, the email attachment of an email item is lost if the attached .eml file title contains specific characters.
- After you enter and format a text in a table of a content editor web part in a site in Internet Explorer, Internet Explorer scrolls the page unexpectedly.
- If your permission isn't enabled on the Manage Permissions page, you don't receive email notification as expected even if you are granted permissions.
- When you try to apply a filter to a list view, you receive the following error message if it's grouped by a calculated column.
- SqlError: 'ORDER BY items must appear in the select list if SELECT DISTINCT is specified.
- After you migrate from classic-mode to claims-based authentication in SharePoint 2013, you receive an exception when you try to access the SPFileVersion.CreatedBy property of a document.
- When the subject line of a SharePoint alert email is longer than 75 characters and contains a mix of single-byte and double-byte characters, a carriage return line feed (CLRF) can occur between the two bytes of a double-bite character, causing the string to get corrupted.
- Headings structure is incorrect in blogs basic view.
- When you start a crawl for a web application that's migrated from SharePoint Server 2010, the crawl fails, and the content isn't searchable. This issue occurs because the connector retrieves the TenantId property two times.
- When you open a document in Word Web App, you receive the following error message if there are special characters in the URL of the document.
- Sorry, there was a problem and we can't open this document.
- When you try to restore a site that's backed up in a site collection, you receive the following error message if the site collection lock is set to No Access.
- Access to the web site has been blocked. The site isn't accessible and isn't displayed on Central Admin.
- It's difficult for a screen reader to understand the structure between sections on a discussion board because there's only one heading. This update adds h2 and h3 labels to discussion boards for better screen reading.
- In SharePoint Server 2013 on-premises, you can't be redirected to SharePoint Online to create sites.
- When you print a document that is set as final in Word 2013, the date and time value disappears.
- When you save a file that has certain future content created in later versions of Excel in Excel 2016, Excel 2016 may crash.
- When you open a password-protected Excel Workbook through a hyperlink, a blank Excel window appears.
- Adds new Get & Transform features in Excel 2016. See KB3141518 for more information.
- Keyboard support for Office add-ins in the Backstage is broken.
- If a document has certain OpenType fonts, the print preview and the printout of the document are different.
- You can't perform mail merge with a header file by using Office Open XML documents.
- Plain text content control does not preserve the font in VBA if the Windows language isn't English.
- When you rest the pointer on a hyperlink, a bubble that contains the actual link is displayed. However, it disappears in a short time, so it's difficult to read the actual link.
- It takes a long time when you repaginate a document that has a StyleRef field in Word 2016.
- When you print a document that has markup in balloons in Word 2016, Word may crash.
- When you delete inline shapes and add a comment in Word 2016, Word may crash.
- When you open a document that contains text written from right to left (for example, Hebrew or Arabic text) and optional hyphens, Word 2016 may crash in some rare cases.
- When you print a finalized document that has date and time fields inserted in Word 2016, the date and time is not displayed.
- Character borders aren't displayed in Word 2016 for characters positioned to the left of the line's origination point (for example, in case of negative indent).
- When you change the position of a picture font to Raised or Lowered in Word 2016, you experience unexpected scroll up and down.
- Top and bottom paragraph borders for text inside a table may not be displayed at some zoom levels in Word 2016.

THIS UPDATE FIXES CRITICAL ISSUES AND ALSO HELPS TO IMPROVE SECURITY:
- It includes fixes for vulnerabilities that an attacker can use to overwrite the contents of your computer's memory with malicious code.
- The security update addresses the vulnerabilities by:
- Correcting how Office handles objects in memory
- Changing the way certain functions handle objects in memory
- Properly initializing the affected variable
- Helping to ensure that SharePoint Server properly sanitizes web requests
- Correcting how the Lync for Mac 2011 client validates certificates

Microsoft Office for Mac 2011 14.7.1 (Update)
- This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
- Nonsecurity-related fixes and improvements that are included in this security update
- Translate some terms into Slovak to make sure that the meaning is accurate.
- When you insert content into cells in Microsoft Excel, Excel intermittently freezes on virtual machines and low-end devices.
- When macros and some add-ins are included in operations to update the status bar text frequently, they are significantly slower in Office 2013 and 2016 than in earlier versions.
- When you enable the desktop composition feature in Windows, Office 2013 application windows turn white.
- When you rename a ribbon button that has a short command name through the customize ribbon dialog box, the command naming dialog box strips two special layout characters from the control name that's used in East Asian languages to control word breaking.
- If you have content that's protected by IRM based on an admin template and the admin template is then archived, you can't do certain operations on it.
- Skype for Business 2015 (Lync 2013) crashes during shutdown.
- Translate some terms in multiple languages to make sure that the meaning is accurate.
- When you run macro code to access the XML nodes in a custom XML part in a document in Microsoft Word 2016, you receive the following error message: Run-time error -2147467259 (80004005): Reference to undeclared namespace prefix.
- The check in, check out, and versioning functions don't work on a closed internal network with no Internet access. For example, when you try to check out a document, you receive the following error message: Microsoft Office cannot complete the operation because the network is unavailable. Check your network connection and try again.
- After you close a document that's open in protected view in Excel 2016, Excel crashes.
- When you send email message that have images in a high-DPI environment, the images are displayed in a larger size in a normal-DPI environment.
- If you have content that's protected by IRM based on an admin template and the admin template is then archived, you can't do certain operations on the content.
- Improve performance of rendering the custom filter list of items when the list contains long strings.
- When a workbook is loaded in Microsoft SharePoint that has a PivotTable connected to a BISM file and it points to another workbook in the same farm, Power Pivot can't use some Korean DBCS characters in the formula bar.
- It takes a long time to paste filtered selection data from large tables.
- When an add-in or macro code tries to access a property on a shape control that no longer exists, Excel 2013 crashes. This update returns an error status instead of crashing.
- When you try to load HTML documents that contain tags in the protected view, you receive a corrupted file alert, and the documents can't be opened.
- When you select cells by dragging on touch-enabled devices, Excel 2013 crashes because of interactions with accessibility (UIA) APIs that are on by default.
- After you import a table that has multi-line columns and the Enhanced Rich Text function configured from SharePoint to Excel, the text in the multi-line columns is preceded by a blank line.
- Improve performance of rendering the custom filter list of items when the list contains long strings.
- When you use Excel 2016 with a printer that is added on the computer or with a printer that is accessible in a remote session, Excel 2016 crashes.
- When you do a find-and-replace operation by using the clipboard marquee, you experience a slow performance.
- When you switch single document interface (SDI) windows and select sheets in Excel 2016, Excel crashes.
- Excel 2016 silently fails to complete loading a workbook. When this happens, the workbook may be functional, but you may be unable to save it.
- When you try to load HTML documents that contain tags in the protected view, you receive a corrupted file alert, and the documents can't be opened.
- It takes a long time to paste filtered selection data from large tables.
- When an add-in or macro code tries to access a property on a shape control that no longer exists, Excel 2016 crashes. This update returns an error status instead of crashing.
- The Solver Add-in fails to load.
- This update makes handling of click events on embedded content more secure.

Microsoft Office for Mac 2011 14.7.0 (Update)

Improvements and fixes:
Microsoft AutoUpdate 3.8.1:
- Microsoft AutoUpdate includes a new option to automatically detect, download, and install updates
- Fixes an issue where Microsoft AutoUpdate crashes when older versions of Microsoft Silverlight are installed

Security fixes:
- This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights

The security update addresses the vulnerabilities by correcting how:
- Microsoft Office initializes variables
- Affected versions of Office and Office components handle objects in memory

Microsoft Office for Mac 2011 14.6.8 (Update)
- This update fixes critical issues and also helps to improve security. It includes fixes for vulnerabilities that an attacker can use to overwrite the contents of your computer's memory with malicious code.
- Applies to: Office 2011, Office 2011 Home and Business Edition, Word 2011, Excel 2011, PowerPoint 2011, Outlook 2011, Office for Mac Standard 2011 Edition, Microsoft Office for Mac Home and Student 2011 and Microsoft Office for Mac Academic 2011