MS09-043: Description of the security update for Office 2003 Web Components and Office XP Web Components in Office 2003: August 11, 2009


<html><body><p>Resolves a security vulnerability that exists in Microsoft Office 2003 Web Components and in Microsoft Office XP Web Components that could allow arbitrary code to run when a maliciously modified Web page is opened.</p><h2></h2><div class="kb-notice-section section">This update was rereleased to address a problem in which the previous version of the update cannot be installed if Access Runtime 2003 is installed. If the previous version of the update is installed in quiet mode, the update is installed successfully. However, future updates may not install successfully. <br/><br/>If you experience either of these problems, you should install the rereleased update. If you do not use Access Runtime 2003 or if you successfully installed the previous version of this update, and you do not experience problems installing later updates, you do not have to install the rereleased update.</div><h2>INTRODUCTION</h2><div class="kb-summary-section section">Microsoft has released security bulletin MS09-043. To view the complete security bulletin, visit one of the following Microsoft Web sites:<br/><ul class="sbody-free_list"><li>Home users:<div class="indent"><a href="http://www.microsoft.com/security/updates/bulletins/200908.aspx" id="kb-link-1" target="_self">http://www.microsoft.com/security/updates/bulletins/200908.aspx</a></div><span class="text-base">Skip the details</span>: Download the updates for your home computer or laptop from the Microsoft Update Web site now:<br/><div class="indent"><a href="http://update.microsoft.com/microsoftupdate" id="kb-link-2" target="_self">http://update.microsoft.com/microsoftupdate</a></div></li><li>IT professionals:<div class="indent"><a href="http://www.microsoft.com/technet/security/bulletin/ms09-043.mspx" id="kb-link-3" target="_self">http://www.microsoft.com/technet/security/bulletin/ms09-043.mspx</a></div></li></ul><span><h3 class="sbody-h3">How to obtain help and support for this security update</h3> <br/>Help installing updates: <br/><a href="https://support.microsoft.com/ph/6527" id="kb-link-4" target="_self">Support for Microsoft Update</a><br/><br/>Security solutions for IT professionals: <br/><a href="http://technet.microsoft.com/security/bb980617.aspx" id="kb-link-5" target="_self">TechNet Security Troubleshooting and Support</a><br/><br/>Help protect your computer that is running Windows from viruses and malware:<br/><a href="https://support.microsoft.com/contactus/cu_sc_virsec_master" id="kb-link-6" target="_self">Virus Solution and Security Center</a><br/><br/>Local support according to your country: <br/><a href="https://support.microsoft.com/common/international.aspx" id="kb-link-7" target="_self">International Support</a><br/><br/></span></div><h2></h2><div class="kb-moreinformation-section section"><h3 class="sbody-h3">More information about this security update</h3><h4 class="sbody-h4">Known issues</h4><ul class="sbody-free_list"><li>This security update updates the Office Web Components (OWC) primary interop assembly to use a new control ID. If you are using the primary interop assembly in a solution, you must install this update and then rebuild your solution to use the new primary interop assembly and control ID.</li><li>If you have updated a computer that had Microsoft FrontPage 2002 or Microsoft Office FrontPage 2003 installed to the 2007 Microsoft Office system, and you did not remove FrontPage, FrontPage may still be installed. FrontPage includes the OWC. Therefore, a computer that was updated in this manner may still have the OWC installed, and this security update will apply.<br/><br/>You can verify the installed products by using the <strong class="uiterm">Add or Remove Programs</strong> item in Windows XP or by using the <strong class="uiterm">Programs and Features</strong> item in Windows Vista and in Windows 7. You may not see the Office Web Components listed as installed. However, if FrontPage is listed, the Office Web Components may be installed, and this security update may apply.</li></ul><h4 class="sbody-h4">Prerequisites to install this security update</h4><span>This security update is a post Microsoft Office 2003 Service Pack 3 security update. To install the security update, you must have Microsoft Office 2003 Service Pack 3 installed.</span><br/><br/><span>For more information about how to obtain this service pack, click the following article number to view the article in the Microsoft Knowledge Base:<br/><br/><div class="indent"><a href="https://support.microsoft.com/en-us/help/870924" id="kb-link-8">870924 </a> How to obtain the latest service pack for Office 2003<br/><br/></div></span></div><h2>FILE INFORMATION</h2><div class="kb-summary-section section"><span>The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the <strong class="uiterm">Time Zone</strong> tab in the <strong class="uiterm">Date and Time</strong> item in Control Panel. </span><h4 class="sbody-h4">Office XP Web Components</h4><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">File name</th><th class="sbody-th">File version</th><th class="sbody-th">File size</th><th class="sbody-th">Date</th><th class="sbody-th">Time</th></tr><tr class="sbody-tr"><td class="sbody-td">Owc10.dll</td><td class="sbody-td">10.0.6854.0</td><td class="sbody-td">7,255,872</td><td class="sbody-td">18-May-2009</td><td class="sbody-td">08:28</td></tr></table></div><h4 class="sbody-h4">Office 2003 Web Components</h4><div class="table-responsive"><table class="sbody-table table"><tr class="sbody-tr"><th class="sbody-th">File name</th><th class="sbody-th">File version</th><th class="sbody-th">File size</th><th class="sbody-th">Date</th><th class="sbody-th">Time</th></tr><tr class="sbody-tr"><td class="sbody-td">Atp.dll</td><td class="sbody-td">11.0.8164.0</td><td class="sbody-td">148,312</td><td class="sbody-td">19-Apr-2007</td><td class="sbody-td">20:55</td></tr><tr class="sbody-tr"><td class="sbody-td">Owc11.dll</td><td class="sbody-td">11.0.8304.0</td><td class="sbody-td">8,058,192</td><td class="sbody-td">25-Mar-2009</td><td class="sbody-td">00:47</td></tr><tr class="sbody-tr"><td class="sbody-td">Owc11pia.dll</td><td class="sbody-td">11.0.8305.0</td><td class="sbody-td">477,056</td><td class="sbody-td">29-Mar-2009</td><td class="sbody-td">18:46</td></tr></table></div></div></body></html>