Microsoft KB Archive/827430

= Overview of the Access 2002 Runtime Security Patch: September 3, 2003 =

Article ID: 827430

Article Last Modified on 5/21/2007

-

APPLIES TO


 * Microsoft Office XP Developer Edition

-







For a Microsoft Access 2000 version of this article, see 827431.



SUMMARY
Microsoft released an update to Microsoft Access 2002 Runtime. This update fixes a problem where Microsoft Office XP documents that are specifically crafted to contain malicious Microsoft Visual Basic for Applications (VBA) projects may run unauthorized code on your computer. This Access 2002 Runtime update is part of the continued effort by Microsoft to provide the latest product updates to customers.

This article describes how to download and then how to install the Access 2002 Runtime Security Patch: KB827430.



How to Download and Install the Update
Important Before you install this update, make sure that your system meets the following requirement:  Access 2002 Runtime Update: KB813617:

Before you install this update, install Access 2002 Runtime Update: KB813617.

For additional information about how to install the Access 2002 Runtime Update: KB813617, click the following article number to view the article in the Microsoft Knowledge Base:

813617 Access 2002 Runtime Update: April 30, 2003



Note If the Access 2002 Runtime Update: KB813617 is not already installed on your computer, you receive the following error message when you try to install the Access 2002 Runtime Security Patch: KB827430:

The expected version of the product was not found on your system.

Office Product Updates Web Site

To have the Office Product Updates Web site detect the required updates that you must install on your computer, visit the following Microsoft Web site:

http://office.microsoft.com/ProductUpdates/default.aspx

After detection is complete, you receive a list of recommended updates for your approval. Click Start Installation to complete the process.

Developer Steps for Updating Existing Run-time Programs You can use either of the following two options:
 * Direct Users to the Microsoft Office Product Updates Web site
 * Distribute the Access 2002 Runtime Update: KB813617

Direct Users to the Microsoft Office Product Updates Web Site

One option for updating computers is to have each user visit the Microsoft Office Products Updates Web site and download the update. Microsoft recommends that you install the client update. To do so, visit the Office Product Updates Web site. The Office Product Updates Web site detects your particular installation of Access Runtime and other Microsoft Office components and then prompts you to install exactly what you must have to make sure that your Access Runtime installation is completely up-to-date. To use this option, have each user follow these steps.

Note After you install the update, you cannot remove it. To revert to an installation before the update was installed, you must remove the Access run-time program and then install it again from the original source. Remember to back up any data files before you remove the Access run-time program.  Visit the Microsoft Office Products Updates Web site:

http://office.microsoft.com/officeupdate/default.aspx

 Click Check for Updates. Click Access 2002 Runtime Security Patch: KB827430, and then click Start Installation. Click to select the I accept the terms of the license agreement check box, and then click Next.</li> Click Next two times.</li> Click Finish.</li></ol>

Distribute the Access 2002 Runtime Security Patch: KB827430

Another option for updating computers is to download and distribute the client update or the full-file update to users.

Note After you install the update, you cannot remove it. To revert to an installation before the update was installed, you must remove the Access run-time program and then install it again from the original source. Remember to back up any data files before you remove the Access run-time program.

To download and distribute the client update to users, follow these steps: <ol> Download the Access 2002 Runtime Security Patch: KB827430.

The following file is available for download from the Microsoft Download Center:

Download the officexp-kb827430-client-enu.exe package now.

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.</li> Distribute the file officexp-kb827430-client-enu.exe to the users.</li> Have the users open Microsoft Windows Explorer, double-click officexp-kb827430-client-enu.exe, and then follow the steps to install.</li></ol>

Note Applying full-file updates directly to client computers is an efficient way to make sure that all users have the most current version of the software when you do not know the updates that users have applied. Additionally, users can apply a full-file patch even if they do not have access to the installation source.

To download and distribute the full-file update to users, follow these steps: <ol> Download the Access 2002 Runtime Security Patch: KB827430.

The following file is available for download from the Microsoft Download Center:

Download the officexp-kb827430-fullfile-enu.exe package now.

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.</li> Distribute the file officexp-kb827430-fullfile-enu.exe to the users.</li> Have the users open Microsoft Windows Explorer, double-click officexp-kb827430-fullfile-enu.exe, and then follow the steps to install.</li></ol>

For more information about this installation strategy and a comparison of the different update options, visit the following Microsoft Web site:

http://office.microsoft.com/en-us/orkXP/HA011525711033.aspx

How to Determine if the Update Is Installed
The update contains updated versions of the following files: <pre class="fixed_text">  File name      Version Snapview.exe  10.0.4622.0 Snapview.ocx  10.0.5529.0 Vbe6.dll      6.4.99.69 To determine if the update is installed on your computer, follow these steps.

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.
 * 1) Click Start, and then click Search.
 * 2) In the Search Results pane, click All files and folders under Search Companion.
 * 3) In the All or part of the file name box, type Snapview.exe, and then click Search.
 * 4) In the files list, right-click Snapview.exe, and then click Properties.
 * 5) Click the Version tab, if the version number is 10.0.4622.0 the update is installed on your computer.

Note If the Access 2002 Runtime Security Patch: KB827430 is already installed on your computer, you receive the following error message when you try to install the Access 2002 Runtime Security Patch: KB827430:

This update has already been applied or is included in an update that has already been applied.

List of Issues That Are Fixed in the Update
The Access 2002 Runtime Security Patch: KB827430 fixes the following issues that were not previously documented in the Microsoft Knowledge Base.

Office Documents Contain Malicious VBA Projects That May Run Unauthorized Code
Office XP documents that are specifically crafted to contain malicious VBA projects may run unauthorized code on your computer.

A SnapShot Object that Is Not Linked May Appear with Desktop Color
If you insert a SnapShot object (.snp) but you do not link the object to a document, you may not see the object. The SnapShot object may appear with the same color as the desktop.

New ClassID Is Added to Snapshot.ocx
The Office Web Component (OWC) does not support the original Global Unique Identifier (GUID) and ClassID for Microsoft Internet Explorer.

SnapShot Viewer May Load a File Across a Domain
If you use the SnapShot Viewer control on a page, you may be able to load a Snapshot file from a different domain.

SnapShot Viewer May Quit Unexpectedly or You Receive an Error Message
When you open a SnapShot Viewer file (.snp), SnapShot Viewer may quit unexpectedly or you may receive the following error message:

An error occurred while opening a Snapshot file.

Snapview.ocx Is Not Registered Correctly
Snapview.ocx does not correctly register itself.

CSnapshotViewerControl May Cause Access to Quit Unexpectedly
Access may quit unexpectedly when you make a programming call to CSnapshotViewerControl::InitViewingFromStg.

Keywords: atdownload kbdownload kbsecurity kbinfo kbupdate KB827430

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.