Description of the security update for Office XP WordPerfect 5.x Converter: September 14, 2004

View products that this article applies to.

SUMMARY

Microsoft has released a security update for Microsoft Office XP. The following "Table of contents" section describes the information that this article contains.

Back to the top

A vulnerability could allow arbitrary code to run when the computer uses the WordPerfect 5.x Converter to open a maliciously crafted document. The security update resolves this vulnerability so that the files that the converter opens are handled appropriately.

Back to the top

MORE INFORMATION

Back to the top

Security update details

List of issues that the security update fixes

The security update for the Office XP WordPerfect 5.x Converter addresses the following issue that was not previously documented in the Microsoft Knowledge Base.

WordPerfect 5.x Converter vulnerability

A vulnerability exists in the Office XP WordPerfect 5.x converter that could enable arbitrary code to run when an Office XP program uses this converter to open a maliciously crafted document.

Back to the top

Installation details

How to obtain and install the security update

You can find the client security packs, the administrative security packs, the installation instructions, and the deployment strategies in the Microsoft Download Center. To download this security update from the Microsoft Download Center, visit the following Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=10A6CEB3-7B94-4F74-A5A0-60C31CE2F57B (http://www.microsoft.com/downloads/details.aspx?FamilyId=10A6CEB3-7B94-4F74-A5A0-60C31CE2F57B)

How to determine whether the security update is installed

The security update contains files with the versions that are listed in the following table.

File name         Version
----------------------------------
Msconv97.dll      2003.1100.6252.0
Wpft532.cnv       2003.1100.6252.0

You do not have to install this security update if you have a later version of the files that are listed in the table. For additional information about how to determine the version of the Office XP WordPerfect 5.x Converter that is installed on your computer, click the following article number to view the article in the Microsoft Knowledge Base:

291331 (http://support.microsoft.com/kb/291331/ ) How to check the version of Office XP

Information for administrators about .msp files

The administrative security update is made up of a full-file Microsoft Windows Installer software update file (.msp file) that is packaged in a self-extracting executable file. The .msp files in the following table are distributed in this security update.

Collapse this tableExpand this table

Name of .msp file	Description
Msconvop.msp	Applies to the optimized version of the security update.
Msconvff.msp	Applies to the full-file administrative version of the security update.

Features for reinstalling specific components for administrators

If you update your administrative installation point, recache, and then reinstall Office XP on client computers, you can run a command line that includes the reinstall=[list of features] property. This property specifies whether you want to reinstall specific components of Office XP from the administrative image. For the security update for the Office XP WordPerfect 5.x Converter, the value for [list of features] is as follows:

TextConverters
TCWP5Files

Optionally, you can substitute the parameter reinstall=all to reinstall all Microsoft Office components on the client computer.

The Office Admin Update Center for Office IT Professionals contains the latest administrative updates and strategic deployment resources for all versions of Microsoft Office. For more information about the Office Admin Update Center, visit the following Microsoft Web site:

http://technet.microsoft.com/office/bb267346.aspx (http://technet.microsoft.com/office/bb267346.aspx)

Back to the top