MS08-070: Description of the security update for Office XP: December 9, 2008

This article has been archived. It is offered "as is" and will no longer be updated.
Microsoft has released security bulletin MS08-070. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:Virus Solution and Security Center

Local support according to your country: International Support

More information about this security update

Known issues with this security update

  • After you apply this security update, you may have to accept the Microsoft Software License Terms when you start a Microsoft Office XP program. If you do not accept the Microsoft Software License Terms, the Office XP program may not start.
  • This security update updates the CLSID of a Microsoft Visual Basic 6 control. After you apply this security update, you must register the updated CLSID if you are using the updated controls in any of the following:
    • An application other than Microsoft Office
    • A Web application
    • A Microsoft Office Visual Basic for Applications macro
    To do this, follow these steps:
    1. Open a Command Prompt window.
      • In Windows Vista, click Start  Start button , type cmd in the Start Search box, and then press ENTER.
      • In Windows XP, click Start, click Run, type cmd in the Open box, and then click OK.
    2. At the command prompt, type the following command, and then press ENTER:
      regsvr32 %windir%\System32\Mscomct2.ocx
    3. At the command prompt, type exit, and then press ENTER to close the Command Prompt window.


This security update is a post Microsoft Office XP Service Pack 3 security update. To install the security update, you must have Microsoft Office XP Service Pack 3 installed.

For more information about how to obtain this service pack, click the following article number to view the article in the Microsoft Knowledge Base:
307841 How to obtain the latest Office XP service pack

Security update availability

This security update is available only for the following languages:
  • Chinese Simplified
  • Chinese Traditional
  • Chinese Traditional Taiwan
  • Korean


The available languages version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
File nameFile versionFile sizeDateTime
officexp office2002 office2k2 office10 offxp off2002 off2k2 off10 frontpage2002 frontpage2k2 frontpagexp fp2002 fp2k2 fpxp mui update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service dos detection tool automatic microsoft download center office update

Article ID: 957797 - Last Review: 11/02/2013 19:58:00 - Revision: 6.0

  • Microsoft FrontPage 2002 Standard Edition
  • kbnosurvey kbarchive kbofficexppostsp3fix kbfix kbbug kbsecvulnerability kbsecbulletin kbsecurity kbqfe kbexpertisebeginner KB957797