OFF2000: Microsoft Office 2000 HTML Data Security Update Available

Microsoft has released the Microsoft Office 2000 HTML Data Security Update, which eliminates a security vulnerability in Microsoft Office 2000 programs. The vulnerability could allow a Hypertext Markup Language (HTML) file that contains a Data object tag to crash a Microsoft Office 2000 program and potentially run arbitrary or malicious code.

Microsoft recommends that this update be installed on all systems that use Microsoft Office 2000 programs.

For more information about the Microsoft Office 2000 HTML Data Security Update, please browse to the following Microsoft Security Bulletin:
NOTE: For information about how to deploy the Microsoft Office 2000 HTML Data Security Update within your organization by using an administrative update, please see the following Microsoft Knowledge Base article.

NOTE: To install the Microsoft Office 2000 HTML Data Security Update, you must first update all Microsoft Office 2000 programs to the Service Release 1 (SR-1) or Service Release 1a (SR-1a) level.

For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

How to Install the Update

To install the Microsoft Office 2000 HTML Data Security Update, follow these steps:

1. In your Web browser, browse to the following Microsoft Web site:
   http://www.microsoft.com/downloads/details.aspx?familyid=68d8730b-52c9-4f2c-8cad-8c8a68aa4e6e&displaylang=en
2. To download the update, click Download Now! at the top left of the page, and follow the instructions in the dialog boxes. Save the update to your hard disk drive.
3. Double-click the Of9data.exe program file on your hard disk to start the Setup program.
4. Follow the instructions on the screen to complete the installation.

By default, the Microsoft Office 2000 HTML Data Security Update creates a log file during the update. The log file is created in your \Temp\OfficeHotFix folder and has a name similar to the following:

How to Confirm That the Microsoft Office 2000 HTML Data Security Update Is Successfully Installed

Note that the Mso9.dll file is updated to version 9.0.0.4402 after the Microsoft Office 2000 HTML Data Security Update is installed. Also, click About on the Help menu in Microsoft Excel, Microsoft Word, or Microsoft Access. The version number should be 9.0.4402.