MS13-054: Description of the security update for Office 2003 Service Pack 3: July 9, 2013

ID KB2817480
Type mskb
Reporter Microsoft
Modified 2019-11-06T02:25:56


<html><body><p>Resolves a vulnerability that could allow remote code execution on a client system if a user opens a specially crafted document or visits a specially crafted webpage that embeds TrueType font files.</p><h2></h2><div class="kb-summary-section section"><br/><a bookmark-id="appliestoproducts" href="#appliestoproducts" managed-link="" target="">View products that this article applies to.</a></div><h2>Introduction</h2><div class="kb-summary-section section">This update resolves a vulnerability that could allow remote code execution on a client system if a user opens a specially crafted document or visits a specially crafted webpage that embeds TrueType font files.<br/><span></span></div><h2>Summary</h2><div class="kb-summary-section section">Microsoft has released security bulletin MS13-054. To view the complete security bulletin, go to one of the following Microsoft websites: <ul class="sbody-free_list"><li>Home users:<br/><div class="indent"><a href="" id="kb-link-1" target="_self"></a></div><span class="text-base">Skip the details</span>: Download the updates for your home computer or laptop from the Microsoft Update website now: <div class="indent"><a href="" id="kb-link-2" target="_self"></a></div></li><li>IT professionals:<br/><div class="indent"><a href="" id="kb-link-3" target="_self"></a></div></li></ul></div><h2></h2><div class="kb-summary-section section"><h3 class="sbody-h3">How to obtain help and support for this security update</h3>Help installing updates: <a href="" id="kb-link-4" target="_self">Support for Microsoft Update</a><br/><br/>Security solutions for IT professionals: <a href="" id="kb-link-5" target="_self">TechNet Security Troubleshooting and Support</a><br/><br/>Help protect your computer that is running Windows from viruses and malware: <a href="" id="kb-link-6" target="_self">Virus Solution and Security Center</a><br/><br/>Local support according to your country: <a href="" id="kb-link-7" target="_self">International Support</a></div><h2></h2><div class="kb-moreinformation-section section"><h3 class="sbody-h3">More information about this security update</h3></div><h2></h2><div class="kb-moreinformation-section section"><h3 class="sbody-h3">Download information</h3>This update is available for download from the Microsoft Download Center:<div class="indent"><a href="" id="kb-link-8" target="_self">Microsoft Office 2003 (32-bit)</a></div><br/></div><h2></h2><div class="kb-moreinformation-section section"><h4 class="sbody-h4">Known issues with this security update</h4><ul class="sbody-free_list"><li><a href="" id="kb-link-9">Microsoft Update or Windows Update may offer this update </a> even though you do not have a Microsoft Office 2003 application installed.<br/></li></ul></div><h2></h2><div class="kb-moreinformation-section section"><h4 class="sbody-h4">Prerequisites to apply this security update</h4>To apply this security update, you must have <a href="" id="kb-link-11">Service Pack 3 for Office 2003 </a> installed on the computer.<br/><br/></div><h2></h2><div class="kb-moreinformation-section section"><h4 class="sbody-h4">Restart information</h4>You may have to restart the computer after you install this security update.<br/><br/>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.<br/><br/>To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update.<br/><br/>See <a href="" id="kb-link-12">Why you may be prompted to restart your computer after you install a security update on a Windows-based computer </a> for more information.</div><h2></h2><div class="kb-moreinformation-section section"><h4 class="sbody-h4">Removal information</h4><span class="text-base">Note</span> We do not recommend that you remove any security update.<br/><br/>To remove this security update, use the <strong class="uiterm">Add or Remove Programs</strong> item or use the <strong class="uiterm">Programs and Features</strong> item in Control Panel.<br/><br/><span class="text-base">Note</span> When you remove this security update, you may be prompted to insert the disc that contains Microsoft Office. Additionally, you may not have the option to uninstall this security update from the <strong class="uiterm">Add or Remove Programs</strong> item or the <strong class="uiterm">Programs and Features</strong> item in Control Panel. There are several possible causes for this issue.<br/><br/>See <a href="" id="kb-link-13">Information about the ability to uninstall Office updates </a> for more information.</div><h2></h2><div class="kb-moreinformation-section section"><h4 class="sbody-h4">Security update replacement information</h4>This security update replaces <a href="" id="kb-link-14">MS12-034: Description of the security update for Office 2003 Service Pack 3: May 8, 2012 </a>.</div><h2></h2><div class="kb-moreinformation-section section"><div class="faq-section" faq-section=""><div class="faq-panel"><div class="faq-panel-heading" faq-panel-heading=""><span class="link-expand-image"><span class="faq-chevron win-icon win-icon-ChevronUpSmall"></span></span><span class="bold btn-link link-expand-text"><span class="bold btn-link">File information</span></span></div><div class="faq-panel-body" faq-panel-body=""><span><div class="kb-collapsible kb-collapsible-collapsed">The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the <strong class="uiterm">Time Zone</strong> tab in the <strong class="uiterm">Date and Time</strong> item in Control Panel.<br/><h5 class="sbody-h5 text-subtitle">For all supported x86-based versions of Office 2003</h5><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><td class="sbody-td"><span class="text-base">File name</span></td><td class="sbody-td"><span class="text-base">Version</span></td><td class="sbody-td"><span class="text-base">Size</span></td><td class="sbody-td"><span class="text-base">Date</span></td><td class="sbody-td"><span class="text-base">Time</span></td></tr><tr class="sbody-tr"><td class="sbody-td">GDIPlus.dll</td><td class="sbody-td">11.0.8404</td><td class="sbody-td">1,701,528</td><td class="sbody-td">28-May-2013</td><td class="sbody-td">16:31</td></tr></table></div></div><br/></span></div></div></div></div><h2></h2><div class="kb-moreinformation-section section"><a class="bookmark" id="appliestoproducts"></a><br/><h3 class="sbody-h3">Applies to</h3>This article applies to the following:<ul class="sbody-free_list"><li>Microsoft Office 2003 Service Pack 3</li></ul></div></body></html>