MS09-060: Description of the security update for Outlook 2003: October 13, 2009

Support for Office 2003 has ended

Microsoft ended support for Office 2003 on April 8, 2014. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

Microsoft has released security bulletin MS09-060. To view the complete security bulletin, visit one of the following Microsoft Web sites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:Virus Solution and Security Center

Local support according to your country: International Support

This update changes the CLSID of the Outlook View Control and sets the killbit for the previous CLSID to make sure that the previous version of the control cannot be instantiated in Internet Explorer. The new CLSID is {261B8CA9-3BAF-4BD0-B0C2-BF04286785C6}. The old CLSID is {0468C085-CA5B-11D0-AF08-00609797F0E0}. If you are using the Outlook View Control in a compiled or managed application, you may have to update your solution to reference the new CLSID. Solutions that use Visual Basic for Applications in Microsoft Office do not have to be updated and will continue to function as expected.

Known issues with this security update

  • This update may not install if the following conditions are true:
    • Access Runtime 2003 is installed.
    • Security Update for Office 2003 Web Components (KB947319) is installed.
    Both conditions must be true to encounter this error.

    To resolve this issue, install the rereleased version of security update 947319. For more information about security update 947319, click the following article number to view the article in the Microsoft Knowledge Base:
    947319MS09-043: Description of the security update for Office 2003 Web Components and Office XP Web Components in Office 2003: August 11, 2009
  • After you install this update, the Outlook View Control may not function in those programs that use Forms 2.0 functionality. To resolve this issue, install the following security update for Microsoft Office 2003:
    974554 MS09-060: Description of the security update for Office 2003: October 13, 2009
  • If you uninstall this update, the Outlook View Control may not function as expected. This occurs because uninstalling this update removes components that will affect the performance of the Outlook View Control. To resolve the issue, you must repair Office 2003 to reinstall those components. To do this, follow these steps:
    1. Start an Office program.
    2. On the Help menu, click Detect and Repair.
    3. Click Start.
    4. Click Ignore if the Close Office Programs dialog box displays the following message (where program is any Office program that is currently running):
      In order to correctly pick up or restore your settings, the following programs must be closed:
      Microsoft program
    5. After the repair process is complete, click OK when you receive the following message (where edition is the version of Office that you have installed, such as Microsoft Office Professional Edition 2003):
      Microsoft Office edition Setup completed successfully.


You must have Microsoft Office 2003 Service Pack 3 (SP3) installed to apply this security update.

For more information about how to obtain Office 2003 Service Pack 3, click the following article number to view the article in the Microsoft Knowledge Base:
870924 How to obtain the latest service pack for Office 2003

Replacement information

This security update replaces the following security update:
945432 MS08-015: Description of the security update for Outlook 2003: March 11, 2008
The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Microsoft Office Outlook 2003

File nameFile versionFile sizeDateTimePlatform
Exsec32.dll_000111.0.8311.0350,02415-Jun-200923:43Not Applicable
Oladd.fae11.0.8164.0162,64819-Apr-200721:03Not Applicable
Olappt.fae11.0.8164.0156,51219-Apr-200721:03Not Applicable
Oljrnl.fae11.0.8164.0121,18419-Apr-200721:03Not Applicable
Olkprtid.xmlNot Applicable81,02826-Aug-200319:43Not Applicable
Olmail.fae11.0.8164.0116,57619-Apr-200721:03Not Applicable
Olnote.fae11.0.8164.0108,38419-Apr-200721:03Not Applicable
Oltask.fae11.0.8164.0150,88019-Apr-200721:03Not Applicable
Outlvbs.dll_000111.0.8164.050,01619-Apr-200720:52Not Applicable
Sc2.sam11.0.8164.0114,52019-Apr-200721:03Not Applicable
Schplus.sam11.0.8164.0149,34419-Apr-200721:03Not Applicable
update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE Off11 Office11 OL11

Article ID: 973705 - Last Review: 05/08/2012 21:53:00 - Revision: 5.0

Microsoft Office Outlook 2003

  • kbsurveynew kbfix kbbug kbsecvulnerability kbsecbulletin kbsecurity kbqfe kbexpertiseinter KB973705