MS08-072: Vulnerabilities in Microsoft Word could allow remote code execution

Support for Office 2003 has ended

Microsoft ended support for Office 2003 on April 8, 2014. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

This article has been archived. It is offered "as is" and will no longer be updated.
INTRODUCTION
Microsoft has released security bulletin MS08-072. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:Virus Solution and Security Center

Local support according to your country: International Support

More information

Known issues and additional information about this security update

For more information about this security update and for information about any known issues with specific releases of this software, click the following article numbers to view the articles in the Microsoft Knowledge Base:
956328 MS08-072: Description of the security update for Word 2000: December 9, 2008
956329 MS08-072: Description of the security update for Word 2002: December 9, 2008
956357 MS08-072: Description of the security update for Word 2003: December 9, 2008
956358 MS08-072: Description of the security update for Word 2007: December 9, 2008
956366MS08-072: Description of the security update for Word Viewer 2003: December 9, 2008
956828MS08-072: Description of the security update for the 2007 Microsoft Office system and the Microsoft Office Compatibility Pack: December 9, 2007
959487 MS08-072: Description of the security update for Microsoft Works 8: December 9, 2008
960401 Description of the Microsoft Office 2008 for Mac 12.1.5 Update
960402Description of the Microsoft Office 2004 for Mac 11.5.3 Update
960403Description of the Open XML File Format Converter for Mac 1.0.2 Update
FILE INFORMATION
The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time and with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.

Word 2000
File nameFile versionFile sizeDateTime
Winword.exe9.0.0.89748,835,12424-Oct-200822:37

Word 2002
File nameFile versionFile sizeDateTime
Winword.exe10.0.6850.010,742,60828-Oct-200822:40

Word 2003
File nameFile versionFile sizeDateTime
Winword.exe11.0.8237.012,310,86413-Oct-200819:25

Word 2007
File nameFile versionFile sizeDateTime
Winword.exe12.0.6331.5000347,48819-Oct-200801:38
Wwlib.dll12.0.6331.500017,496,41619-Oct-200801:38
Msword.olb12.0.6300.5000768,02407-Dec-200708:05

Word Viewer 2003
File nameFile versionFile sizeDateTime
Wordview.exe11.0.8241.08,810,32017-Nov-200820:49

The 2007 Microsoft Office system and the Microsoft Office Compatibility Pack
File nameFile versionFile sizeDateTime
Wordcnv.dll 12.0.6331.50004,283,23219-Oct-200801:19
Wordconv.exe12.0.6300.500024,58413-Dec-200708:08

Microsoft Office 2004 for Mac
FileVersion
Microsoft Excel11.5.3
Microsoft Component Plugin11.5.3
Microsoft Word11.5.3
Timezones11.5.3
Timezones.xml11.5.3
update security_patch security_update security bug flaw vulnerability malicious attacker exploit unauthenticated specially-formed scope specially-crafted
Properties

Article ID: 957173 - Last Review: 01/16/2015 17:52:19 - Revision: 7.0

Microsoft Office Basic 2007, Microsoft Office Enterprise 2007, Microsoft Office Home and Student 2007, Microsoft Office Professional 2007, Microsoft Office Professional Plus 2007, Microsoft Office Small Business 2007, Microsoft Office Standard 2007, Microsoft Office Ultimate 2007, Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats, Microsoft Office Word 2007, Microsoft Office Word 2003, Microsoft Word 2002, Microsoft Word 2000, Microsoft Office 2004 for Mac Standard Edition, Microsoft Office 2004 for Mac Professional Edition, Microsoft Office 2004 for Mac Student and Teacher Edition, Microsoft Entourage 2004 for Mac, Microsoft Excel 2004 for Mac, Microsoft PowerPoint 2004 for Mac, Microsoft Word 2004 for Mac, Microsoft Office 2008 for Mac, Microsoft Office 2008 for Mac Home and Student Edition, Microsoft Office 2008 for Mac Special Media Edition, Microsoft Entourage 2008 for Mac, Microsoft Excel 2008 for Mac, Microsoft PowerPoint 2008 for Mac, Microsoft Word 2008 for Mac, Microsoft Office Word Viewer 2003 Service Pack 3

  • kbnosurvey kbarchive atdownload kbbug kbexpertiseinter kbfix kbsecbulletin kbsecurity kbsecvulnerability kbsurveynew KB957173
Feedback