Official patches are available only for Office 2007 and higher, but since it's a standalone component that hasn't changed since the year 2000, and Microsoft has simply applied a binary patch to the executable and resigned it, you can also use this patch with Office 2000, XP and 2003.
aka KB4011276) on Office 2000/XP/2003 and had the following contents:Ī remote code execution vulnerability was patched this month in Equation Editor, an Office component ( CVE-2017-11882 | Microsoft Office Memory Corruption Vulnerability, Description of the security update for 2007 Microsoft Office Suite: November 28, 2017).
#Can i use 32 bit asap on office 2016 64 bit install
This post used to be titled HOWTO: Install Office 2007 Equation Editor security update (KB4011604. See the following links for more details and Microsoft's suggestions for replacements of Equation Editor functionality. If your version of Office is still supported, simply apply the latest patches from Microsoft Update (see the CVE link below for manual downloads).įor older versions like Office 2000/XP/2003, you can either remove this feature with the Office installer and mark it unavailable (as described below in the If you don't use Equation Editor section), or simply replace the existing EQNEDT32.EXE with a 0-size empty file still called EQNEDT32.EXE (this appears to be what the patches for newer Office versions do).
I'm guessing this drastic measure has to do with the fact that Microsoft doesn't seem to have the source code for this bundled third-party application, and since it's been under ongoing attack even after the previous binary patch was issued for it, they decided that continuing to patch the binary just wasn't feasible. With the latest patches out this Tuesday, Microsoft has completely removed Equation Editor from all still supported Office versions, so it's a very good idea to also remove it from older Office versions ASAP.
0 kommentar(er)
