Microsoft KB Archive/873366

= Description of the Excel 2002 security update: October 12, 2004 =

Article ID: 873366

Article Last Modified on 9/30/2007

-

APPLIES TO


 * Microsoft Excel 2002 Standard Edition

-



SUMMARY
''Microsoft has released a security update for Microsoft Excel 2002. The following &quot;Article contents&quot; section describes the information that this article contains about the security update.''



Article contents

 * INTRODUCTION
 * MORE INFORMATION
 * Security update details
 * List of issues that this security update fixes
 * Installation details
 * How to obtain and install the security update
 * How to determine whether the service pack is installed
 * Information for administrators about .msp files
 * Features for reinstalling specific components for administrators
 * Error signature details



INTRODUCTION
A security vulnerability exists in Microsoft Excel 2002 that could allow arbitrary code to run when you open a maliciously modified spreadsheet. This vulnerability exists because of a problem in the way that Excel 2002 interprets data from a spreadsheet where certain properties have been maliciously modified. If successfully exploited, an attacker could craft a malicious spreadsheet that could cause code of the attacker’s choice to be executed automatically upon opening the maliciously modified spreadsheet. This update resolves this vulnerability so that Excel 2002 spreadsheets are handled appropriately.

For additional information about this security vulnerability, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/ms04-033.mspx

back to the top



List of issues that the security update fixes
The Excel 2002 security update: KB873366 fixes the issues that are described in the following hotfix package:

829348 Excel 2002 post-Service Pack 3 hotfix package: May 6, 2004

back to the top

How to obtain and install the security update
The security update, and also installation instructions and deployment strategies, are found on the Microsoft Download Center. To download this security update from the Microsoft Download Center, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=5E0FADD3-1554-4C43-9B4A-D5E031478892

back to the top

How to determine whether the security update is installed
The security update contains a file with the version that is listed in the following table:   File name      Version --  Excel.exe      10.0.6713.0 You do not have to install this security update if you have a later version of the file that is listed in this table.

For additional information about how to determine the version of Excel 2002 that is installed on your computer, click the following article number to view the article in the Microsoft Knowledge Base:

291331 How to check the version of Office XP

back to the top

Information for administrators about .msp files
The security update is made up of a full-file Microsoft Windows Installer patch file (.msp file) that is packaged in a self-extracting executable file. The following .msp file is distributed in this security update:

Excelff.msp

back to the top

Features for reinstalling specific components for administrators
If you update your administrative installation point and recache and reinstall Excel 2002 on client computers, you can run a command line that includes the REINSTALL=[list of features] property. This property specifies whether you want to reinstall specific components of Excel 2002 from the administrative image. For the Excel 2002 security update: KB873366, the value for list of features is as follows:

EXCELFiles,WORDNonBootFiles

Optionally, you can substitute the parameter REINSTALL=ALL to reinstall all Microsoft Office components on the client computer.

The Office Admin Update Center for Office IT Professionals contains the latest administrative updates and strategic deployment resources for all versions of Office. For more information about the Office Admin Update Center, visit the following Microsoft Web site:

http://technet.microsoft.com/office/bb267346.aspx

back to the top

Error signature details
When you use Excel 2002, you receive an error message that is similar to the following:

Microsoft Excel has encountered a problem and needs to close. We are sorry for the inconvenience. To see what data this error report contains, click here.

When you view the data in the error report, the report contains an error signature that is similar to one of the following error signatures. These error signatures are fixed by the security update.  Application name Application version  Module name  Module version  Offset Excel.exe        10.0.6501.0          Excel.exe    10.0.6501.0     004e8879 Excel.exe        10.0.6127.0          Excel.exe    10.0.6127.0     00228edd Excel.exe        10.0.5815.0          Mso.dll      10.0.4219.0     00009ade Excel.exe        10.0.5815.0          Excel.exe    10.0.5815.0     004d39a0 Excel.exe        10.0.4929.0          Excel.exe    10.0.4929.0     0030963c Excel.exe        10.0.4524.0          Excel.exe    10.0.4524.0     004d337a Excel.exe        10.0.4524.0          Excel.exe    10.0.4524.0     004d337f Excel.exe        10.0.4302.0          Excel.exe    10.0.4302.0     004d327a Excel.exe        10.0.4302.0          Excel.exe    10.0.4302.0     004d327f Excel.exe        10.0.3506.0          Excel.exe    10.0.3506.0     004e5780 Excel.exe        10.0.2614.0          Excel.exe    10.0.2614.0     00707984 Excel.exe        10.0.2614.0          Excel.exe    10.0.2614.0     00707981 Excel.exe        10.0.2614.0          Excel.exe    10.0.2614.0     004e289a Additionally, other program versions, module versions, and offsets are possible.

back to the top

Additional query words: excel2002 xl2002 excel office security patch performance reliability update download xp fix getKB

Keywords: atdownload kbsecurity kbdownload kbfix kbupdate KB873366

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.