Security Update for SharePoint Team Services (KB890829)
Brief Description
A security vulnerability exists in SharePoint® Team Services from Microsoft® that could allow cross-site scripting and spoofing attacks. This update resolves that vulnerability.
Note: The full-file version (officexp-kb890829-fullfile-enu.exe) of this update installs successfully on Office XP Service Pack 3 for SharePoint Team Services or Office XP SP-2 for Office XP Web Components installations.
Microsoft Windows Installer version 2.0 or later. Microsoft Windows 2000 Service Pack 3 and Microsoft Windows XP include this version of the Windows Installer. Otherwise, the latest version of Windows Installer is available as a separate download at the following locations:
Installation instructions
If you have SharePoint® Team Services from Microsoft®, do one of the following:
Use Office Update on the Office Online Web site (recommended). Office Update automatically detects Office and prompts you to install updates and service packs that bring Office programs up-to-date.
Install Security Update for SharePoint Team Services (KB890829). To do this, follow these steps:
Download one of the two .exe files by using the links at the bottom of the
page, and then save the file to your hard disk drive.
officexp-kb890829-client-enu.exe: You should download this file if you have access to your
original product CD-ROM. You might need to provide the installation source
during patch installation if you have previously updated your product.
officexp-kb890829-fullfile-enu.exe: Download this file if you do not have access to your original product CD-ROM or if you have experienced problems installing the officexp-kb890829-client-enu.exe.
It is recommended that you quit any programs you are running.
In Windows Explorer, double-click the .exe file that you saved to your hard disk drive, and follow the instructions on the screen.
The downloads for this update are under the Files in this Download section below. You can double-click the executable package to begin installation, or extract the patch files (MSP files) by using a command line. The command line and instructions are included in the Knowledge Base article (197147): Command-Line Switches For IExpress Software Update Packages.