Description of the Office XP WordPerfect 5.x Converter Security Patch: September 3, 2003 (824938)


The information in this article applies to:

  • Microsoft Office XP
  • Microsoft FrontPage 2002
  • Microsoft Publisher 2002
  • Microsoft Works Suite 2003
  • Microsoft Works Suite 2002

Notice

For a Microsoft Office 2000 version of this article, see 824993.

SUMMARY

Microsoft has released an update to Microsoft Office XP. This update fixes a buffer overrun flaw in the Microsoft Office WordPerfect converter which could be exploited when a user imports a Corel WordPerfect file with your Microsoft Office XP program. This Office XP update is part of the continued effort by Microsoft to provide the latest product updates to customers.

This article describes how to download and install the Office XP WordPerfect 5.x Converter Security Patch: KB824938.

MORE INFORMATION

How to Download and Install the Update

Important Before you install this update, make sure that the following requirements have been met:
  • Microsoft Windows Installer 2.0
    Before you install this update, you must install Windows Installer 2.0 or later. For additional information about this requirement, see the "Windows Installer Update Requirements" section of this article.
  • Office XP Service Pack 2 (SP-2)
    Before you install this update, install Office XP SP-2. For additional information about how to install Office XP Service Pack 2, click the following article number to view the article in the Microsoft Knowledge Base:

    325671 OFFXP: Overview of the Office XP Service Pack 2

Client Update

If you installed your Office program from a CD-ROM, you have the following two options:
  • Use the Office Product Updates Web site to automatically install all the latest updates that include all available service packs and public updates.
  • Install only the Office XP WordPerfect 5.x Converter Security Patch: KB824938 by following the steps described later in this article.
Note Microsoft recommends that you install the client update by using the Office Product Updates Web site. The Office Product Updates Web site detects your particular installation of Microsoft Office and prompts you to install exactly what you must have to make sure that your Office installation is completely up-to-date.

Office Product Updates Web Site

To have the Office Product Updates Web site detect the required updates that you must install on your computer, visit the following Microsoft Web site:

http://office.microsoft.com/ProductUpdates/default.aspx

After detection is complete, you receive a list of recommended updates for your approval. Click Start Installation to complete the process.

Install Only the Office XP WordPerfect 5.x Converter Security Patch: KB824938

The following file is available for download from the Microsoft Download Center:
DownloadDownload the OfficeXP-KB824938-Client-Enu.exe package now.

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. After you click the link to download the patch, follow these steps:

To download and install the client update, follow these steps:
  1. Click Save to save the Officexp-kb824938-client-enu.exe file to the selected folder.
  2. In Windows Explorer, double-click Officexp-kb824938-client-enu.exe.
  3. If you are prompted to install the update, click Yes.
  4. Click Yes to accept the License Agreement.
  5. Insert your Office XP CD-ROM when you are prompted to do so, and then click OK.
  6. When you receive a message that indicates the installation was successful, click OK.
Note After you install the update, you cannot remove it. To revert to an installation before the update was installed, you must remove Office XP, and then install Office XP again from the original CD-ROM.

Administrative Update

If you installed your Office XP product from a server location, the server administrator must update the server location with the administrative update and then deploy that update to your computer.

If you are the server administrator, follow these steps to download the administrative update.

Note These steps assume that you are familiar with the procedure for updating your administrative installation.

The following file is available for download from the Microsoft Download Center:
DownloadDownload the OfficeXP-KB824938-Fullfile-Enu.exe package now.

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. After you click the link to download the patch, follow these steps:
  1. Click Save to save the OfficeXP-kb824938-fullfile-enu.exe file to the selected folder.
  2. In Windows Explorer, double-click OfficeXP-kb824938-fullfile-enu.exe.
  3. If you are prompted to install the update, click Yes.
  4. Click Yes to accept the License Agreement.
  5. In the Type the location where you want to put the extracted files box, type c:\KB824938, and then click OK.
  6. Click Yes when you are prompted to create the folder.
  7. Click Start, and then click Run. Type the following command in the Open box

    msiexec /a Admin Path\MSI File /p C:\KB824938\MSP File SHORTFILENAMES=TRUE

    where Admin Path is the path of your administrative installation point for Office XP (for example, C:\OfficeXP), MSI File is the .msi database package for the Office XP product (for example, Data1.msi), and MSP File is the name of the administrative update (for example, Msconvff.msp).

    Note You can append /qb+ to the command line so that the Office XP Administrative Installation dialog box and the End User License Agreement dialog box do not appear.
  8. To deploy the update to the client workstations, click Start, and then click Run. Type the following command in the Open box

    msiexec /i Admin Path\MSI File REINSTALL=Feature List REINSTALLMODE=vomu

    where Admin Path is the path of your administrative installation point for Office XP (for example, C:\OfficeXP), MSI File is the MSI database package for the Office XP product (for example, Data1.msi), Feature List is the list of feature names (case sensitive) that have to be reinstalled for the update. To install all features, you can use REINSTALL=ALL, or you can install the following features:

    TextConverters,TCWP5Files

For additional information about how to update your administrative installation and deploy to client workstations, click the following article number to view the article in the Microsoft Knowledge Base:

301348 How to install a public update to administrative installations of Office XP

This article contains standard instructions for installing an administrative public update. You can also see the following article in the Microsoft Office Resource Kit:

http://www.microsoft.com/office/ork/xp/journ/wpft1001a.htm

How to Determine Whether the Update Is Installed

The update contains updated versions of the following files:
   File name      Version
   -----------------------
   Msconv97.dll   2003.1100.5510.0
   Wpft532.cnv    2002.1100.5510.0
To determine whether the update is installed on your computer, follow these steps.

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.
  1. Click Start, and then click Search.
  2. In the Search Results pane, click All files and folders under Search Companion.
  3. In the All or part of the file name box, type the file name of one of the files updated by this update (for example, Msconv97.dll, and then click Search.
  4. In the list of files, right-click the Msconv97.dll file, and then click Properties.
  5. Look at the Version tab to determine whether the update is installed on your computer.
For additional information about how to determine the version of Office XP on your computer, click the following article number to view the article in the Microsoft Knowledge Base:

291331 How to check the version of Office XP

Note If the Office XP WordPerfect 5.x Converter Security Patch: KB824938 is already installed on your computer, you receive the following error message when you try to install the Office XP WordPerfect 5.x Converter Security Patch: KB824938:
This update has already been applied or is included in an update that has already been applied.

Windows Installer Update Requirements

To install the update that is described in this article requires Windows Installer 2.0 or later. Both Microsoft Windows XP and Microsoft Windows 2000 Service Pack 3 (SP3) include Windows Installer 2.0 or later. To install the latest version of the Windows Installer, visit one of the following Microsoft Web sites.

Windows Installer for Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition:

http://www.microsoft.com/downloads/details.aspx?familyid=cebbacd8-c094-4255-b702-de3bb768148f&displaylang=en

Windows Installer for Microsoft Windows NT 4.0 and Windows 2000:

http://www.microsoft.com/downloads/details.aspx?FamilyID=4b6140f9-2d36-4977-8fa1-6f8a0f5dca8f&DisplayLang=en

List of Issues Fixed by the Update

The Office XP WordPerfect 5.x Converter Security Patch: KB824938 fixes the following issues that were previously not documented in the Microsoft Knowledge Base.

Possible Buffer Overrun Security Problem

This update fixes a security problem in which a buffer overrun situation is possible when you use the Office XP WordPerfect converter.
Modification Type:MajorLast Reviewed:5/2/2006
Keywords:ATdownload kbdownload kbinfo kbUpdate KB824938 kbAudEndUser
©2004 Microsoft Corporation. All rights reserved.