MS09-010: Description of the security update for Office 2000: April 14, 2009

This article has been archived. It is offered "as is" and will no longer be updated.
Microsoft has released security bulletin MS09-010. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:Virus Solution and Security Center

Local support according to your country: International Support

More information about this security update

Known issue with this security update

The Html32.cnv, Mswrd832.cnv, and Msconv97.dll files are installed from any one of the following sources:
  • Windows NT 4.0
  • Windows 2000
  • Windows Server 2003
  • Windows XP
  • Microsoft FrontPage 2000 (Html32.cnv only)
  • A version of Microsoft Office 2000 that includes Microsoft FrontPage 2000 (Html32.cnv only)
After you install this security update, the Html32.cnv, Mswrd832.cnv, and Msconv97.dll files may not be updated.

If Office is not installed, the Office update will not install on the computer if Office is not present. WordPad or Office will not use these converter files, although they remain present on the system.By default, if Office is installed, the Mswrd832.cnv and Msconv97.dll files are installed only on first use by Office. The files in the TextConv location may not be the Office versions of the files but the operating system versions.

After you install this security update, the Mswrd832.cnv and Msconv97dll files may not be updated. However, the update will install the updated files in the Windows Installer caching mechanism. After you install the Word 97 for Windows or Word 98 Macintosh component, or the first time that you open a Word file, the updated converter is installed to the TextConv location. This is by design.

HTML32.cnv: This file may not update if you are running a version of Office 2000 that does not include FrontPage.

Am I still vulnerable after I apply this update?
No, WordPad uses the WPC files in the TextConv location to open files. When Office requests a relevant file to be loaded, the latest copy will be installed from the Windows Installer caching mechanism that was updated by the security update.

Prerequisites to install this security update

You must have Microsoft Office 2000 Service Pack 3 (SP3) installed to apply this security update.

For more information about how to obtain this service pack, click the following article number to view the article in the Microsoft Knowledge Base:
276367 How to obtain the latest service pack for Office 2000

Removal information

After you install this security update, you cannot remove the update. To revert to an earlier installation of Office 2000, remove Office 2000. Then, reinstall Office 2000 from the original CD.


The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
File nameFile versionFile sizeDateTime
update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service dos patch performance security stability update office

Article ID: 921606 - Last Review: 11/02/2013 19:44:00 - Revision: 8.0

  • Microsoft Office 2000 Premium Edition
  • Microsoft Office 2000 Professional Edition
  • Microsoft Office 2000 Small Business Edition
  • Microsoft Office 2000 Standard Edition
  • Microsoft Office 2000 Developer Edition
  • kbnosurvey kbarchive kbsurveynew kbsecvulnerability kbsecurity kbsecbulletin kbfix kbexpertiseinter kbbug atdownload KB921606