Office 2003 Security Update: KB838905

Brief Description

This update fixes a vulnerability where a specially crafted image could allow an attacker’s code to run on a user’s machine due to a security vulnerability in the graphics interpreter code.

Overview

Microsoft recommends that you use the Office Update site to determine if your computer requires this update before installing it.

For more information on this update, see the Microsoft Knowledge Base article (838905) Description of the Office 2003 Security Update: KB838905.

Top of page

System Requirements

Supported Operating Systems: Windows 2000 Service Pack 3; Windows 2000 Service Pack 4; Windows Server 2003; Windows XP; Windows XP 64-bit; Windows XP Embedded; Windows XP Media Center Edition

This update applies to the following Office application:

Office 2003

Top of page

Instructions

Note: Administrators should refer to the Administrator resources section.

Installation instructions
If you have Microsoft Office 2003, do one of the following:

Use Office Update on the Office Online Web site (recommended). Office Update automatically detects Office and prompts you to install updates and service packs that bring Office programs up-to-date.

Install only Office 2003 Security Update: KB838905. To do this, follow these steps:

Download one of the two .exe files by using the links at the bottom of the page, and then save the file to your hard disk drive.
- Office2003-kb838905-client-enu.exe: You should download this file if you have access to your original product CD-ROM. You might need to provide the installation source during patch installation if you have previously updated your product.
- Office2003-kb838905-fullfile-enu.exe: Download this file if you do not have access to your original product CD-ROM or if you have experienced problems installing the Office2003-kb838905-client-enu.exe.
It is recommended that you quit any programs you are running.

In Windows Explorer, double-click the .exe file that you saved to your hard disk drive, and follow the instructions on the screen.

Administrator resources
Administrators working in managed environments can find complete resources for deploying Office updates in an organization on the Office Admin Update Center. On the home page of that site, look under Update Strategies section for the product version you are updating.

The downloads for this update are under the Files in this Download section below. You can double-click the executable package to extract the patch files (MSP files). The command line and instructions are included in the Knowledge Base article (197147): Command-Line Switches For IExpress Software Update Packages.

See the Microsoft Knowledge Base article Description of the Office 2003 Security Update: KB838905 for further information about this update.

Top of page