Open any Office app, such as Word, and create a new document. Go to File Account (or Office Account if you opened Outlook). Under Product Information, choose Update Options Update Now. Note: You may need to click Enable Updates first if you don't see the Update Now option right away. Download and install or reinstall Office for Mac 2011. Support ended for Office for Mac 2011 as of September 22, 2016.

-->

Published: September 13, 2011 | Updated: September 13, 2011

Version: 1.1

This bulletin summary lists security bulletins released for September 2011.

With the release of the security bulletins for September 2011, this bulletin summary replaces the bulletin advance notification originally issued September 8, 2011. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.

For information about how to receive automatic notifications whenever Microsoft security bulletins are issued, visit Microsoft Technical Security Notifications.

Microsoft is hosting a webcast to address customer questions on these bulletins on September 14, 2011, at 11:00 AM Pacific Time (US & Canada). Register now for the September Security Bulletin Webcast. After this date, this webcast is available on-demand. For more information, see Microsoft Security Bulletin Summaries and Webcasts.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.

Bulletin Information

Executive Summaries

The following table summarizes the security bulletins for this month in order of severity.

For details on affected software, see the next section, Affected Software and Download Locations.

Bulletin ID	Bulletin Title and Executive Summary	Maximum Severity Rating and Vulnerability Impact	Restart Requirement	Affected Software
[MS11-070](http://go.microsoft.com/fwlink/?linkid=225825)	Vulnerability in WINS Could Allow Elevation of Privilege (2571621) This security update resolves a privately reported vulnerability in the Windows Internet Name Service (WINS). The vulnerability could allow elevation of privilege if a user received a specially crafted WINS replication packet on an affected system running the WINS service. An attacker must have valid logon credentials and be able to log on locally to exploit this vulnerability.	[Important](http://go.microsoft.com/fwlink/?linkid=21140) Elevation of Privilege	Requires restart	Microsoft Windows
[MS11-071](http://go.microsoft.com/fwlink/?linkid=223632)	Vulnerability in Windows Components Could Allow Remote Code Execution (2570947) This security update resolves a publicly disclosed vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a legitimate rich text format file (.rtf), text file (.txt), or Word document (.doc) that is located in the same network directory as a specially crafted dynamic link library (DLL) file. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.	[Important](http://go.microsoft.com/fwlink/?linkid=21140) Remote Code Execution	May require restart	Microsoft Windows
[MS11-072](http://go.microsoft.com/fwlink/?linkid=225047)	Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (2587505) This security update resolves five privately reported vulnerabilities in Microsoft Office. The vulnerabilities could allow remote code execution if a user opens a specially crafted Excel file. An attacker who successfully exploited any of these vulnerabilities could gain the same user rights as the logged-on user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. Installing and configuring Office File Validation (OFV) to prevent the opening of suspicious files blocks the attack vectors for exploiting the vulnerabilities described in CVE-2011-1986 and CVE-2011-1987.	[Important](http://go.microsoft.com/fwlink/?linkid=21140) Remote Code Execution	May require restart	Microsoft Office, Microsoft Server Software
[MS11-073](http://go.microsoft.com/fwlink/?linkid=225103)	Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2587634) This security update resolves two privately reported vulnerabilities in Microsoft Office. The vulnerabilities could allow remote code execution if a user opens a specially crafted Office file or if a user opens a legitimate Office file that is located in the same network directory as a specially crafted library file. An attacker who successfully exploited either of the vulnerabilities could gain the same user rights as the logged on user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.	[Important](http://go.microsoft.com/fwlink/?linkid=21140) Remote Code Execution	May require restart	Microsoft Office
[MS11-074](http://go.microsoft.com/fwlink/?linkid=204797)	Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2451858) This security update resolves five privately reported vulnerabilities and one publicly disclosed vulnerability in Microsoft SharePoint and Windows SharePoint Services. The most severe vulnerabilities could allow elevation of privilege if a user clicked on a specially crafted URL or visited a specially crafted Web site. For the most severe vulnerabilities, Internet Explorer 8 and Internet Explorer 9 users browsing to a SharePoint site in the Internet Zone are at a reduced risk because, by default, the XSS Filter in Internet Explorer 8 and Internet Explorer 9 helps to block the attacks in the Internet Zone. The XSS Filter in Internet Explorer 8 and Internet Explorer 9, however, is not enabled by default in the Intranet Zone.	[Important](http://go.microsoft.com/fwlink/?linkid=21140) Elevation of Privilege	May require restart	Microsoft Office, Microsoft Server Software

Exploitability Index

The following table provides an exploitability assessment of each of the vulnerabilities addressed this month. The vulnerabilities are listed in order of bulletin ID then CVE ID. Only vulnerabilities that have a severity rating of Critical or Important in the bulletins are included.

How do I use this table?

Use this table to learn about the likelihood of code execution and denial of service exploits within 30 days of security bulletin release, for each of the security updates that you may need to install. Review each of the assessments below, in accordance with your specific configuration, to prioritize your deployment of this month's updates. For more information about what these ratings mean, and how they are determined, please see Microsoft Exploitability Index.

In the columns below, 'Latest Software Release' refers to the subject software, and 'Older Software Releases' refers to all older, supported releases of the subject software, as listed in the 'Affected Software' and 'Non-Affected Software' tables in the bulletin.

Bulletin ID	Vulnerability Title	CVE ID	Code Execution Exploitability Assessment for Latest Software Release	Code Execution Exploitability Assessment for Older Software Releases	Denial of Service Exploitability Assessment	Key Notes
[MS11-070](http://go.microsoft.com/fwlink/?linkid=225825)	WINS Local Elevation of Privilege Vulnerability	[CVE-2011-1984](http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-1984)	[1](http://technet.microsoft.com/en-us/security/cc998259.aspx) - Consistent exploit code likely	[1](http://technet.microsoft.com/en-us/security/cc998259.aspx) - Consistent exploit code likely	Not applicable	(None)
[MS11-071](http://go.microsoft.com/fwlink/?linkid=223632)	Windows Components Insecure Library Loading Vulnerability	[CVE-2011-1991](http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-1991)	[1](http://technet.microsoft.com/en-us/security/cc998259.aspx) - Consistent exploit code likely	[1](http://technet.microsoft.com/e

Microsoft Office 2011 14.7.9 Update