XL2000: Update Available for the Excel 2000 SR-1 REGISTER.ID Function Vulnerability

Microsoft has released an update that eliminates a security vulnerability in Microsoft Excel 2000. This update, the Microsoft Excel 2000 SR-1 REGISTER.ID Function Update, eliminates a security vulnerability that could allow certain types of executables to be run without a warning to the user.

To prevent unsafe macros from running, this update disables the REGISTER.ID worksheet function.

For additional information about the latest service pack for Microsoft Office 2000, click the article number below to view the article in the Microsoft Knowledge Base: To correct this problem, download and install the latest update for Excel 2000. The latest update includes this and all other Excel-specific updates that have been released since the latest service release (SR) of Office. The files included in this update will be included in any later SR or update. To upgrade to the latest Excel update or for more information about the history of Excel 2000 updates, please click the article number below to view the article in the Microsoft Knowledge Base: NOTE: To use the Excel 2000 SR-1 REGISTER.ID Function Update, you must first install Office 2000 SR-1 or Office 2000 Service Release 1a (SR-1a).

System administrators can find additional information and the administrator version of this update at the following Microsoft Web site: To learn more about the Excel 2000 SR-1 REGISTER.ID Function Update, please see the Microsoft Security Bulletin MS00-051.

NOTE: This update includes only the Excel 2000 fix that is included with the Excel 2000 and PowerPoint 2000 HTML Script Vulnerability Update, but it does not include the PowerPoint 2000 fix. Therefore, if you have not yet applied the Administrative Update for the Excel 2000 and PowerPoint 2000 HTML Script Vulnerability Update to your administrative installation and to your network clients, please apply that update after you apply the Excel 2000 SR-1 Register.ID Function Vulnerability Update. For additional information about the Excel 2000 and PowerPoint 2000 HTML Script Vulnerability Update, click the article numbers below to view the articles in the Microsoft Knowledge Base:

How to Download and Install the Update

IMPORTANT:

Follow these steps to download and install the update:

1. Using your Web browser go to the following Web site:
   http://www.microsoft.com/downloads/details.aspx?FamilyID=5C011C70-47D0-4306-9FA4-8E92D36332FE
2. Click Download Now!. Click Save this program to disk, and then click OK.
3. Click Save to save the Xl9p3pkg.exe file to the selected folder.
4. In Windows Explorer, double-click xl9p3pkg.exe.
5. If you are prompted to install the update, click Yes.
6. Click Yes to accept the License Agreement.
7. Insert the Office 2000 compact disc when you are prompted to do so, and then click OK.
8. When you receive a message indicating installation was successful, click OK.

Files Contained in the Xl9p3pkg.exe Download

If you download Xl9p3pkg.exe and manually extract the files by using a command line similar to this the following files will be listed in the C:\xl9p3pkg folder:

How to Verify That the Update Is Successful

To verify whether the installation of the update was successful, check that the last four digits of the version of the Excel.exe file on your system is equal to or later than 4317. By default, Excel.exe is in the following location on your computer: To check the last four digits, follow these steps:

1. Click Start, point to Programs, and then click Windows Explorer.
2. In Windows Explorer, right-click the file and then click Properties on the shortcut menu.
3. Click the Version tab.

How to Get an Update Log File

By default, the Microsoft Excel 2000 SR-1 REGISTER.ID Function Update creates a log file during installation. The log file is created in your \Temp\OfficeHotFix folder and has a name similar to the following:

For additional information, click the article numbers below to view the articles in the Microsoft Knowledge Base: