Microsoft has released its latest updates for Office 2008 and Office 2004, as well as its Open XML File Format Converter, fixing critical security issues in each program. According to Microsoft, all three updates address two vulnerabilities in Word that could allow remote code execution if you were to open a specially crafted malicious Word file.

The updates block this vulnerability by altering the way Word opens and parses files. The Office 2008 update also "readies Office 2008 for Mac for the installation of Microsoft Entourage 2008 for Mac, Web Services Edition, and must be installed before Entourage 2008, Web Services Edition is installed." That version of Entourage, which brings enhanced compatibility to servers running Exchange 2007 Service Pack 1 or later by connecting via the Exchange Web Services format instead of via WebDAV, is currently in beta and expected for final release later this year.

The Microsoft Office 2008 for Mac 12.1.9 Update requires Mac OS X 10.4.9 or later, and that you have already installed the 12.1.0 update (the updater is a combo updater, meaning it contains all fixes since 12.1.0). It's a 268 MB download from Microsoft's Web site, and is also available via the Microsoft AutoUpdate utility launched by choosing Check for Updates from any Office 2008 application.

The Microsoft Office 2004 for Mac 11.5.5 Update requires Mac OS X 10.2.8 or later, and that you've previously installed the Microsoft Office 2004 for Mac 11.0 Update (the updater is a combo updater, containing all fixes since 11.1.0). It's a 59 MB download from Microsoft's Web site and is also available via the Office 2004 version of Microsoft AutoUpdate.

The Microsoft Open XML File Format Converter for Mac 1.0.3 requires Mac OS X 10.4.9 or later, and that you are running Office 2004 11.4.0 or later, or Office X 10.1.9 or later. Microsoft recommends that you install the Office 2004 11.5.5 update prior to the Open XML Converter installation. It's a 45 MB download from Microsoft's Web site, and is also available via the Office 2004 version of Microsoft AutoUpdate.