Description of the Office 2000 WordPerfect 5.x Converter security update: September 14, 2004

Article translations Article translations
Article ID: 873380 - View products that this article applies to.
Expand all | Collapse all

On This Page

SUMMARY

Microsoft has released a security update for Microsoft Office 2000. The following "Article contents" section describes the information that this article contains about the security update.

INTRODUCTION

Microsoft has released an update to Microsoft Office 2000. A vulnerability could allow arbitrary code to run when the system uses the converter to open a maliciously crafted document. The update resolves this vulnerability so that the files that the converter opens are handled appropriately.

MORE INFORMATION

Security update details

List of issues that are fixed in the security update

The Office 2000 WordPerfect 5.x Converter security update: KB873380 fixes the following issue that was not previously documented in the Microsoft Knowledge Base:
  • Possible buffer overrun security problem
    This update fixes a security problem where a buffer overrun situation is possible when you use the Office 2000 WordPerfect 5.x Converter.

Earlier released updates that are included in this security update

The Office 2000 WordPerfect 5.x Converter security update: KB873380 includes the following updates that were released earlier:
824993 Overview of the Office 2000 WordPerfect 5.x Converter security patch: September 3, 2003

Known issues

Known issues during the installation of the service pack

When you are installing office2000-kb873380-fullfile-enu.exe, you are prompted to insert your original product CD-ROM.

Note You may be able to workaround this issue by installing the Microsoft Office 2000 Update: KB835220. The Microsoft Office 2000 Update: KB835220 is inteneded to reduce the need for you to insert your CD-ROM when you are installing Office updates.

For additional information about the Microsoft Office 2000 Update: KB835220, click the following article number to view the article in the Microsoft Knowledge Base:
835220 Description of the Office 2000 Update: February 10, 2004

Installation details

Obtain and install the security update

The client and administrative security updates, and also installation instructions and deployment strategies, are found on the Microsoft Download Center. To download this security update from the Microsoft Download Center, visit the following Web site:
http://www.microsoft.com/downloads/details.aspx?FamilyId=88F52E69-99E1-4892-9A53-84E5DFADFE6B

Determine whether the security update is installed

The security update contains files with the versions that are listed in the following table:
   File name     Version
   ------------------------------
   Msconv97.dll  2003.1100.6252.0
   Wpft532.cnv   2003.1100.6252.0
You do not have to install this security update if you have a later version of the files that are listed in this table.

For additional information about how to determine the version of Office 2000 that is installed on your computer, click the following article number to view the article in the Microsoft Knowledge Base:
255275 How to determine the version of your Office 2000 program

Information for administrators about .msp files

The administrative security update is made up of a full-file Microsoft Windows Installer patch file (.msp file) that is packaged in a self-extracting executable file. The following .msp file is distributed in this security update:
Msconvff.msp

Features for reinstalling specific components for administrators

If you update your administrative installation point and recache and reinstall Office 2000 on client computers, you can run a command line that includes the REINSTALL=[list of features] property. This property specifies whether you want to reinstall specific components of Office 2000 from the administrative image. For the Office 2000 WordPerfect 5.x Converter security update: KB873380, the value for [list of features] is as follows:
TextConverters,TCWP5Files
Optionally, you can substitute the REINSTALL=ALL property to reinstall all the Microsoft Office components on the client computer.

The Office Admin Update Center for Office IT Professionals contains the latest administrative updates and strategic deployment resources for all versions of Office. For more information about the Office Admin Update Center, visit the following Microsoft Web site:
http://technet.microsoft.com/office/bb267346.aspx

Properties

Article ID: 873380 - Last Review: September 30, 2007 - Revision: 2.5
APPLIES TO
  • Microsoft Office 2000 Premium Edition
  • Microsoft Office 2000 Professional Edition
  • Microsoft Office 2000 Small Business
  • Microsoft Office 2000 Standard Edition
  • Microsoft Office 2000 Developer Edition
Keywords: 
kbsecbulletin atdownload kbsecurity kbupdate KB873380

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com