Microsoft KB Archive/873380

= Description of the Office 2000 WordPerfect 5.x Converter security update: September 14, 2004 =

Article ID: 873380

Article Last Modified on 9/30/2007

-

APPLIES TO


 * Microsoft Office 2000 Premium Edition
 * Microsoft Office 2000 Professional Edition
 * Microsoft Office 2000 Small Business
 * Microsoft Office 2000 Standard Edition
 * Microsoft Office 2000 Developer Edition

-



SUMMARY
''Microsoft has released a security update for Microsoft Office 2000. The following &quot;Article contents&quot; section describes the information that this article contains about the security update.''



Article contents

 * INTRODUCTION
 * MORE INFORMATION
 * Security update details
 * List of issues that are fixed in this security update
 * Earlier released updates that are included in this security update
 * Known issues
 * Known issues during the installation of the service pack
 * Installation details
 * Obtain and install the security update
 * Determine whether the security update is installed
 * Information for administrators about .msp files
 * Features for reinstalling specific components for administrators



INTRODUCTION
Microsoft has released an update to Microsoft Office 2000. A vulnerability could allow arbitrary code to run when the system uses the converter to open a maliciously crafted document. The update resolves this vulnerability so that the files that the converter opens are handled appropriately.

back to the top



List of issues that are fixed in the security update
The Office 2000 WordPerfect 5.x Converter security update: KB873380 fixes the following issue that was not previously documented in the Microsoft Knowledge Base:
 * Possible buffer overrun security problem

This update fixes a security problem where a buffer overrun situation is possible when you use the Office 2000 WordPerfect 5.x Converter.

back to the top

Earlier released updates that are included in this security update
The Office 2000 WordPerfect 5.x Converter security update: KB873380 includes the following updates that were released earlier:

824993 Overview of the Office 2000 WordPerfect 5.x Converter security patch: September 3, 2003

back to the top

Known issues during the installation of the service pack
When you are installing office2000-kb873380-fullfile-enu.exe, you are prompted to insert your original product CD-ROM.

Note You may be able to workaround this issue by installing the Microsoft Office 2000 Update: KB835220. The Microsoft Office 2000 Update: KB835220 is inteneded to reduce the need for you to insert your CD-ROM when you are installing Office updates.

For additional information about the Microsoft Office 2000 Update: KB835220, click the following article number to view the article in the Microsoft Knowledge Base:

835220 Description of the Office 2000 Update: February 10, 2004

back to the top

Obtain and install the security update
The client and administrative security updates, and also installation instructions and deployment strategies, are found on the Microsoft Download Center. To download this security update from the Microsoft Download Center, visit the following Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyId=88F52E69-99E1-4892-9A53-84E5DFADFE6B

back to the top

Determine whether the security update is installed
The security update contains files with the versions that are listed in the following table:   File name     Version --  Msconv97.dll  2003.1100.6252.0 Wpft532.cnv  2003.1100.6252.0 You do not have to install this security update if you have a later version of the files that are listed in this table.

For additional information about how to determine the version of Office 2000 that is installed on your computer, click the following article number to view the article in the Microsoft Knowledge Base:

255275 How to determine the version of your Office 2000 program

back to the top

Information for administrators about .msp files
The administrative security update is made up of a full-file Microsoft Windows Installer patch file (.msp file) that is packaged in a self-extracting executable file. The following .msp file is distributed in this security update:

Msconvff.msp

back to the top

Features for reinstalling specific components for administrators
If you update your administrative installation point and recache and reinstall Office 2000 on client computers, you can run a command line that includes the REINSTALL=[list of features] property. This property specifies whether you want to reinstall specific components of Office 2000 from the administrative image. For the Office 2000 WordPerfect 5.x Converter security update: KB873380, the value for [list of features] is as follows:

TextConverters,TCWP5Files

Optionally, you can substitute the REINSTALL=ALL property to reinstall all the Microsoft Office components on the client computer.

The Office Admin Update Center for Office IT Professionals contains the latest administrative updates and strategic deployment resources for all versions of Office. For more information about the Office Admin Update Center, visit the following Microsoft Web site:

http://technet.microsoft.com/office/bb267346.aspx

back to the top

Additional query words: WordPerfect 5.x Converter Office Security Patch Performance Reliability Update Download 2000 Fix

Keywords: kbsecbulletin atdownload kbsecurity kbupdate KB873380

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.