A security vulnerability exists in Microsoft Word 2002 that could allow arbitrary code to run when you open a maliciously modified document. The July 12, 2005 update resolves this vulnerability so that Word 2002 documents are handled appropriately.
Microsoft Windows Installer version 2.0 or later. Microsoft Windows 2000 Service Pack 3 and Microsoft Windows XP include this version of the Windows Installer. Otherwise, the latest version of Windows Installer is available as a separate download at the following locations:
Note: Administrators should refer to the Administrator resources section.
Installation instructions
If you have Microsoft Word 2002, do one of the following:
Use the Microsoft Update detection web site (recommended). Microsoft Update consolidates updates provided by Windows Update and Office Update into one location and enables you to choose automatic delivery and installation of high-priority updates.
Use Office Update on the Office Online Web site. Office Update automatically detects Office and prompts you to install updates and service packs that bring Office programs up-to-date.
Install onlySecurity Update for Word 2002 (KB895589). To do this, follow these steps:
Download one of the two .exe files by using the links at the bottom of the
page, and then save the file to your hard disk drive.
officexp-kb895589-client-enu.exe: You should download this file if you have access to your
original product CD-ROM. You might need to provide the installation source
during patch installation if you have previously updated your product.
officexp-kb895589-fullfile-enu.exe: Download this file if you do not have access to your original product CD-ROM or if you have experienced problems installing the officexp-kb895589-client-enu.exe.
It is recommended that you quit any programs you are running.
In Windows Explorer, double-click the .exe file that you saved to your hard disk drive, and follow the instructions on the screen.
Administrator resources
Administrators working in managed environments can find complete resources for deploying Office updates in an organization on the Office Admin Update Center. On that site, scroll down and look under the Update Resources section for the product version you are updating.
The downloads for this update are under the Files in this Download section below. You can double-click the executable package to begin installation, or extract the patch files (MSP files) by using a command line. The command line and instructions are included in the Knowledge Base article (197147): Command-Line Switches For IExpress Software Update Packages.
