MS09-073: Description of the security update for Windows XP, Windows 2000, and Windows Server 2003: December 8, 2009

Microsoft has released security bulletin MS09-073. To view the complete security bulletin, visit one of the following Microsoft websites:

• Home users:
  http://www.microsoft.com/security/updates/bulletins/200912.aspx

  (http://www.microsoft.com/security/updates/bulletins/200912.aspx)
  Skip the details: Download the updates for your home computer or laptop from the Microsoft Update website now:
  http://update.microsoft.com/microsoftupdate/

  (http://update.microsoft.com/microsoftupdate/)
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/ms09-073.mspx

  (http://www.microsoft.com/technet/security/bulletin/ms09-073.mspx)

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Known issues with this security update

When a file has a ".doc" or ".docx" file name extension, but the content is a plain text file or another kind of file that is not a Microsoft Word binary file, and that file is opened in Microsoft Word, you may receive the following error message up to three times before Microsoft Office Word successfully opens the file: To resolve this issue, an affected user can unregister the mswrd632 converter. To have us unregister the mswrd632 converter for you, go to the "Fix it for me" section. If you would rather unregister the mswrd632 converter yourself, go to the "Let me fix it myself" section.

Fix it for me

To fix this problem automatically, click the Fix this problem link. Then click Run in the File Download dialog box, and follow the steps in this wizard.

Important You must exit Word and Outlook and verify that these applications are closed before you run the Fix it solution.


Note This wizard may be in English only. However, the automatic fix also works for other language versions of Windows.

Note If you are not on the computer that has the problem, you can save the automatic fix to a flash drive or a CD and then run it on the computer that has the problem.

This change will effectively unregister the converter and disable it for third-party applications and for Microsoft Office. Microsoft Office will use its own text converters to open these kinds of files.

After you run the Fix It solution, you may see additional messages when you try to open your file:

• You may see a File Conversion dialog box that resembles the following:
  
  
  Collapse this imageExpand this image

  
  
  
  This message appears when Word does not recognize the file type. You should check the file name extension of the file to make sure that it is using a file name extension that Word recognizes. This message can also appear if the file that you try to open is damaged. To troubleshoot a damaged Word file follow the information that is provided in the next bullet.
  
  
• You may receive a message that resembles the following:
  Word was unable to read this document. It may be corrupted.
  
  This message indicates the file is damaged. Follow the information in the following article in the Microsoft Knowledge Base to try to recover your file.
  
  For Word 2003 and earlier versions
  826864

  (http://support.microsoft.com/kb/826864/ )

  How to troubleshoot damaged Word documents
  For Word 2007 and Word 2010
  918429

  (http://support.microsoft.com/kb/918429/ )

  How to troubleshoot damaged documents in Word 2007 and in Word 2010

After you run the Fix it solution above, you are finished with this article.

Let me fix it myself

To unregister the mswrd632 converter yourself, edit the registry as follows:

1. Exit Word and Outlook and verify that they are closed before you proceed to the next step.
2. Click Start, click Run, type regedit, and then click OK.
3. Locate and then click the following registry subkey:
   • For 32-bit versions of Windows:
     
     HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\Text Converters\Import\MSWord6.wpc
   • For 64-bit versions of Windows:
     
     HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Shared Tools\Text Converters\Import\MSWord6.wpc
4. On the Edit menu, click Delete.
   
   Important You must delete this registry key. If you rename it, these steps will not work.
   
   
5. Click Yes.
6. Exit Registry Editor.

This change will effectively unregister the converter and disable it for third-party applications and for Microsoft Office. Microsoft Office will use its own text converters to open these kinds of files.

After you follow the steps to unregister the mswrd632 converter yourself, you may see additional messages when you try to open your file:

• You may see a File Conversion dialog box that resembles the following:
  
  
  Collapse this imageExpand this image

  
  
  
  This message appears when Word does not recognize the file type. You should check the file name extension of the file to make sure that it is using a file name extension thatWord recognizes. This message can also appear if the file that you try to open is damaged. To troubleshoot a damaged Word file, follow the information that is provided in the next bullet.
  
  
• You may receive a message that resembles the following:
  Word was unable to read this document. It may be corrupted.
  
  This indicates the file is damaged. Follow the information in the following article in the Microsoft Knowledge Base to try to recover your file.
  
  For Word 2003 and earlier versions
  826864

  (http://support.microsoft.com/kb/826864/ )

  How to troubleshoot damaged Word documents
  For Word 2007 and Word 2010
  918429

  (http://support.microsoft.com/kb/918429/ )

  How to troubleshoot damaged documents in Word 2007 and in Word 2010

Functionality changes with this security update

This security update deploys additional changes to the way that Windows and third-party components use the Word 6.0/95 for Windows and Macintosh to RTF converter.

By default, Windows XP SP2, Windows XP SP3, and Windows Server 2003 SP2 operating systems already prevent WordPad from parsing Word 6.0 and Write documents by disabling this text converter. Additionally, this mechanism is deployed on other platforms when security update 885836 (security bulletin MS04-041) is installed. On these platforms, when you open a Word for Windows 6.0 document in WordPad, you receive an error message that resembles the following: Write files are parsed as plain text files, but no message is shown. This behavior is described in Microsoft Knowledge Base article 870883.

This security update will enforce this mechanism more strictly. The restriction now applies to other applications that use the Word 6.0 converter that is included with Windows as part of the WordPad application. By default, third-party applications can no longer use the converter to parse these older file formats.

If an administrator requires the Word 6.0/95 for Windows and Macintosh to RTF converter, you can re-enable the converter by adding an AllowConversion registry entry with a DWORD value of 1. To do this, follow these steps:

1. Click Start, click Run, type regedit, and then click OK.
2. Locate and then click the following registry subkey. Or, create it if it is not present.
   • For 32-bit versions of Windows:
     
     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
   • For 64-bit versions of Windows:
     
     HKEY_LOCAL_MACHINE\Software\Wow6432Node\microsoft\Windows\CurrentVersion\Applets\Wordpad
3. On the Edit menu, point to New, and then click DWORD Value.
4. Type AllowConversion for the name of the DWORD, and then press ENTER.
5. Right-click AllowConversion, and then click Modify.
6. In the Value data box, type 1, and then click OK.
7. Exit Registry Editor.

After you set this registry key value to 1, third-party applications can load the Word 6.0/95 for Windows and Macintosh to RTF converter. Please be aware that setting this registry key removes the protection that was added by this security update. Therefore, it should be done only when you trust the source of the files that are loaded by this converter. You can also disable this converter by setting the registry key value to 0.

If the registry value AllowConversion is not set to 1 or does not exist, and if a Windows component or third-party application tries to open a Word 6.0 file by using the Word 6.0/95 for Windows and Macintosh to RTF converter, the file will not open, and a dialog box will be displayed.

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported x86-based versions of Windows XP

For all supported versions of Windows 2000

For all supported 32-bit versions of Windows Server 2003

For all supported x64-based versions of Windows Server 2003 and of Windows XP Professional x64 edition

For all supported Itanium-based versions of Windows Server 2003