Article ID: 832332 - View products that this article applies to.
Microsoft has released an update to Microsoft Office XP. This article describes how to download and install this Office XP security update.
This update fixes a vulnerability where a specially crafted image could allow for an attacker's code to run on a computer because of a vulnerability in the graphics interpreter code.
Microsoft has released security bulletin MS04-028. The security bulletin contains all the relevant information about the security update, including the file manifest information and the deployment options. To view the complete security bulletin, visit the following Microsoft Web site:
http://www.microsoft.com/technet/security/bulletin/ms04-028.mspxThe following lists the release history for Office XP:
Client updateBefore you install the client update, install Microsoft Office XP Service Pack 3 (SP3).
For more information about how to install Office XP Service Pack 3, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/832671/ )Description of Microsoft Office XP Service Pack 3
Administrative updateBefore you install the administrative update, install Microsoft Office XP Service Pack 2 (SP2) or a later version.
For more information about how to obtain the different service packs for Office XP, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/307841/ )How to obtain the latest Office XP service pack
Microsoft Windows Installer 2.0Before you install this security update, you must install Windows Installer 2.0 or a later version. Both Microsoft Windows XP and Microsoft Windows 2000 Service Pack 3 include Windows Installer 2.0 or a later version. To install the latest version of the Windows Installer, visit one of the following Microsoft Web sites.
Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition (Me):
http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-b702-de3bb768148f%20&displaylang=enMicrosoft Windows NT 4.0 and Microsoft Windows 2000:
How to download and install the updateIf you installed Office XP from a CD, follow the instructions in the following "Client update" section. If you installed your Office XP product from a server location, the server administrator must update the server location with the administrative update and then deploy that update to your computer. If you are a server administrator, follow the instructions in the following "Administrative update" section.
Method 1: Use the Office Update Web siteUse the Office Update Web site to automatically install all the latest updates that include all available service packs and public updates.
Method 2: Install only the Office XP security update: KB832332Note If you install Officexp-kb832332-v2-fullfile-enu.exe on a client that is running Office XP SP2 instead of Office XP SP3, the SP2 text that is displayed in the About program dialog box in each Office application is updated to SP3. This does not mean that Office XP SP3 has been installed. You must still install Office XP SP3 for your Office installation to be completely updated. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/328294/ )The About dialog box reports a service pack version that is different from what is expected in Office XP and Office 2003
(http://support.microsoft.com/kb/301348/ )How to install public updates to administrative installations of Office XP
How to determine whether the update is installedThis security update contains updated versions of the following files:
To determine the version of an Office XP program that is installed on your computer, follow these steps.
File name Version ---------------------- Mso.dll 10.0.6714.0
Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.
291331Note If the Office XP security update: KB832332 is already installed successfully on your computer, you receive the following error message when you try to install the Office XP security update: KB832332:
(http://support.microsoft.com/kb/291331/ )How to check the version of Office XP
This update has already been applied or is included in an update that has already been applied.
List of issues that are fixed by the updateThe Office XP security update: KB832332 fixes the issues that are described in the following Microsoft Knowledge Base articles:
829349The Office XP security update: KB832332 also fixes the following issues.
(http://support.microsoft.com/kb/829349/ )Description of the Office XP post-Service Pack 3 hotfix package for MSO.DLL: May 9, 2004
An image that you inserted appears as a small red XWhen you save an Office XP document as HTML, or when you view the Office document as a Web page, an image that you inserted may appear as a small red X.
An Office XP program closes unexpectedly, and you receive an error messageWhen you run an Office XP program, you may receive the following error message:
If you view the details of the error message, you receive an error signature that is similar to one of the following items.
Microsoft program has encountered a problem and needs to close. We are sorry for the inconvenience.
Application Name Application Version Module Name Module Version Offset ---------------------------------------------------------------------------- Excel.exe 10.0.4302.0 Mso.dll 10.0.4219.0 00004d7a Excel.exe 10.0.4302.0 Mso.dll 10.0.4219.0 00005ae9 Excel.exe 10.0.4524.0 Mso.dll 10.0.4219.0 00004d7a Excel.exe 10.0.4524.0 Mso.dll 10.0.4219.0 00005ae9 Excel.exe 10.0.5815.0 Mso.dll 10.0.4219.0 00005ae9 Msaccess.exe 10.0.2627.1 Mso.dll 10.0.4219.0 00004d7a Msaccess.exe 10.0.2627.1 Mso.dll 10.0.4219.0 00005ae9 Msaccess.exe 10.0.4302.0 Mso.dll 10.0.4219.0 00004d7a Msaccess.exe 10.0.4302.0 Mso.dll 10.0.4219.0 00005ae9 Msaccess.exe 10.0.4510.0 Mso.dll 10.0.4219.0 00005ae9 Mspub.exe 10.0.2621.0 Mso.dll 10.0.4219.0 00005ae9 Mspub.exe 10.0.4128.0 Mso.dll 10.0.4219.0 00005ae9 Outlook.exe 10.0.2627.1 Mso.dll 10.0.4219.0 00005ae9 Outlook.exe 10.0.4024.0 Mso.dll 10.0.4219.0 00004d7a Outlook.exe 10.0.4024.0 Mso.dll 10.0.4219.0 00005ae9 Outlook.exe 10.0.4510.0 Mso.dll 10.0.4219.0 00004d7a Outlook.exe 10.0.4510.0 Mso.dll 10.0.4219.0 00005ae9 Outlook.exe 10.0.5320.0 Mso.dll 10.0.4219.0 00005ae9 Outlook.exe 10.0.5703.0 Mso.dll 10.0.4219.0 00005ae9 Outlook.exe 10.0.5709.0 Mso.dll 10.0.4219.0 00005ae9 Powerpnt.exe 10.0.2623.0 Mso.dll 10.0.4219.0 00005ae9 Powerpnt.exe 10.0.4205.0 Mso.dll 10.0.4219.0 00004d7a Powerpnt.exe 10.0.4205.0 Mso.dll 10.0.4219.0 00005ae9 Winword.exe 10.0.2627.0 Mso.dll 10.0.4219.0 00005ae9 Winword.exe 10.0.3416.0 Mso.dll 10.0.4219.0 00004d7a Winword.exe 10.0.4219.0 Mso.dll 10.0.4219.0 00004d7a Winword.exe 10.0.4219.0 Mso.dll 10.0.4219.0 00005ae9 Winword.exe 10.0.4524.0 Mso.dll 10.0.4219.0 00004d7a Winword.exe 10.0.4524.0 Mso.dll 10.0.4219.0 00005ae9 Winword.exe 10.0.5522.0 Mso.dll 10.0.4219.0 00004d7a Winword.exe 10.0.5522.0 Mso.dll 10.0.4219.0 00005ae9 Winword.exe 10.0.5815.0 Mso.dll 10.0.4219.0 00004d7a Winword.exe 10.0.5815.0 Mso.dll 10.0.4219.0 00005ae9
If you are an administrator, you may want to install all required Graphics Device Interface Plus (GDI+) security updates in one batch process. For more information about how to create and use a batch file to silently install multiple GDI+ security updates, click the following article number to view the article in the Microsoft Knowledge Base:
885885For more information a known issue that may occur when you install the original version of this update, released September 14, on a Windows XP Service Pack 2-based computer, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/885885/ )How to create and use a batch file to silently install multiple GDI+ security updates
885876For more information about deployment, click the following article numbers to view the articles in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/885876/ )Important information that you must know about the MS04-028 security updates if you are using Windows XP Service Pack 2
(http://support.microsoft.com/kb/885920/ )How to obtain and use the MS04-028 Enterprise Update Scanning Tool in environments that use Systems Management Server 2003 and Systems Management Server 2.0
(http://support.microsoft.com/kb/886988/ )How to obtain and use the MS04-028 Enterprise Update Scanning Tool in environments that do not use Systems Management Server
Article ID: 832332 - Last Review: January 9, 2007 - Revision: 6.5