A security vulnerability exists in Microsoft Word 2000 that could allow arbitrary code to run when opening a maliciously modified document. This update resolves this vulnerability so that Word documents are handled appropriately.
Microsoft Windows Installer version 2.0 or later. Microsoft Windows 2000 Service Pack 3 and Microsoft Windows XP include this version of the Windows Installer. Otherwise, the latest version of Windows Installer is available as a separate download at the following locations:
Note: Administrators should refer to the Administrator resources section.
Installation instructions
If you have Microsoft Word 2000, do one of the following:
Use Office Update on the Office Online Web site (recommended). Office Update automatically detects Office and prompts you to install updates and service packs that bring Office programs up-to-date.
Install only Security Update for Word 2000 (KB887977). To do this, follow these steps:
Download one of the two .exe files by using the links at the bottom of the
page, and then save the file to your hard disk drive.
office2000-kb887977-client-enu.exe: You should download this file if you have access to your
original product CD-ROM. You might need to provide the installation source
during patch installation if you have previously updated your product.
office2000-kb887977-fullfile-enu.exe: Download this file if you have experienced problems installing office2000-kb887977-client-enu.exe. You may still be prompted to provide an installation source.
It is recommended that you quit any programs you are running.
In Windows Explorer, double-click the .exe file that you saved to your hard disk drive, and follow the instructions on the screen.
Administrator resources
Administrators working in managed environments can find complete resources for deploying Office updates in an organization on the Office Admin Update Center. On that site, scroll down and look under the Update Resources section for the product version you are updating.
The downloads for this update are under the Files in this Download section below. You can double-click the executable package to begin installation, or extract the patch files (MSP files) by using a command line. The command line and instructions are included in the Knowledge Base article (197147): Command-Line Switches For IExpress Software Update Packages.
