Microsoft KB Archive/828040

= Description of the Outlook 2002 Security Patch: March 9, 2004 =

Article ID: 828040

Article Last Modified on 12/15/2006

-

APPLIES TO


 * Microsoft Outlook 2002 Standard Edition

-



SUMMARY
''Microsoft has released an update to Microsoft Outlook 2002. This update offers the highest levels of stability and security for Outlook 2002. The update also addresses a flaw that could enable an attacker to bypass the blocking capabilities of Microsoft Outlook command-line parameters. The appropriate warning dialog boxes will appear. This update is part of Microsoft’s continued effort to provide the latest product updates to customers.

This article describes how to download and install the Outlook 2002 Security Patch: KB828040.

Note Microsoft Office XP Service Pack 3 includes all the fixes that are found in the Outlook 2002 Security Patch: KB828040.

For additional information about how to install Office XP Service Pack 3, click the following article number to view the article in the Microsoft Knowledge Base:''

832671 Overview of Microsoft Office XP Service Pack 3



How to download and install the administrative version of the Outlook 2002 Security Patch: KB828040
Important Before you install this update, make sure that the following requirements have been met:  Microsoft Windows Installer 2.0

Before you install this update, you must install Windows Installer 2.0 or later. For additional information about this requirement, see the &quot;Windows Installer update requirements&quot; section of this article. Microsoft Office XP Service Pack 2

Before you install this update, install Office XP Service Pack 2.

For additional information about how to install Office XP Service Pack 2, click the following article number to view the article in the Microsoft Knowledge Base:

325671 OFFXP: Overview of the Office XP Service Pack 2

Note The full-file Outlook 2002 Security Patch: KB828040 installs successfully on Office XP Service Pack 1 or Office XP Service Pack 2 installations.

The following file is available for download from the Microsoft Download Center:

Download the English version of the Outlook 2002 Security Patch: KB828040 package now.

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

Note To obtain a localized version of the Outlook 2002 Security Patch: KB828040 package, visit the following Microsoft Web site:

http://www.microsoft.com/office/ork/2003/admin/xp/olk1007a.htm

If you are the server administrator, follow these steps to update the server location with the administrative update and deploy the update:  Click Save to save the Officexp-kb828040-fullfile-enu.exe file to the selected folder. In Microsoft Windows Explorer, double-click officexp-kb828040-fullfile-enu.exe. Click Yes to accept the License Agreement. In the Type the location where you want to place the extracted files box, type c:\828040, and then click OK.</li> Click Yes when you are prompted to create the folder.</li> If you are familiar with the procedure for updating your administrative installation, click Start, and then click Run. Type the following command in the Open box where  is the path of your administrative installation point for Microsoft Office XP (for example, C:\OfficeXP),   is the .msi database package for the Office XP product (for example, ProPlus.msi), and   is the name of the administrative update (for example, OUTLOOKff.msp):

msiexec /a \ /p C:\828040\  SHORTFILENAMES=TRUE

Note You can append /qb+ to the command line so that the Office XP AdministrativeInstallation dialog box and the End User LicenseAgreement dialog box do not appear.</li> To deploy the update to the client workstations, click Start, and then click Run. Type the following command in the Open box where  is the path of your administrative installation point for Office XP (for example, C:\OfficeXP),   is the MSI database package for the Office XP product (for example, ProPlus.msi), and   is the list of feature names (case sensitive) that have to be reinstalled for the update:

msiexec /i \ REINSTALL=  REINSTALLMODE=vomu

To install all features, you can use REINSTALL=ALL, or you can install the following features:

OUTLOOKNonBootFiles,OUTLOOKFiles

</li></ol>

Note After you install the update, you cannot remove it.

For additional information about how to update your administrative installation and deploy to client workstations, click the following article number to view the article in the Microsoft Knowledge Base:

301348 HOW TO: Install a public update to administrative installations of Office XP

This article contains standard instructions for installing an administrative public update. You can also see the following article in the Microsoft Office Resource Kit:

http://www.microsoft.com/office/ork/2003/admin/xp/olk1007a.htm

How to determine whether the update is installed
The update contains updated versions of the following files: <pre class="fixed_text">  File name      Version ---  OUTLOOK.EXE   10.0.5709.0 DLGSETP.DLL  10.0.5626.0 ENVELOPE.DLL 10.0.4817.0 EXCHCSP.DLL  10.0.5328.0 EXSEC32.DLL  10.0.4907.0 IMPMAIL.DLL  10.0.4406.0 OUTLCM.DLL   10.0.5424.0 OUTLCTL.DLL  10.0.5112.0 OUTLLIB.DLL  10.0.5709.0 OUTLMIME.DLL 10.0.4608.0 OUTLPH.DLL   10.0.5703.0 RECALL.DLL   10.0.4721.0 You do not have to install this update if you have a later version of one or more of the files that are listed in the table.

To determine the version of Outlook that is installed on your computer, follow these steps.

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.
 * 1) Click Start, and then click Search.
 * 2) In the Search Results pane, click All files and folders under Search Companion.
 * 3) In the All or part of the file name box, type Outlook.exe, and then click Search.
 * 4) In the list of files, right-click Outlook.exe, and then click Properties.
 * 5) On the Version tab, determine the version of Outlook that is installed on your computer.

For additional information about how to determine the version of product 2002 on your computer, click the following article number to view the article in the Microsoft Knowledge Base:

291331 HOW TO: Check the version of Office XP

Note If the Outlook 2002 Security Patch: KB828040 is already installed on your computer, you receive the following error message when you try to install the Outlook 2002 Security Patch: KB828040:

This update has already been applied or is included in an update that has already been applied.

Windows Installer update requirements
To install the update that is described in this article, you must have Windows Installer 2.0 or later installed. Both Microsoft Windows XP and Microsoft Windows 2000 Service Pack 3 (SP3) include Windows Installer 2.0 or later. To install the latest version of the Windows Installer, visit one of the following Microsoft Web sites.

Windows Installer for Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition (Me):

http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-b702-de3bb768148f%20&displaylang=en

Windows Installer for Microsoft Windows NT 4.0 and Windows 2000:

http://www.microsoft.com/downloads/details.aspx?familyid=4B6140F9-2D36-4977-8FA1-6F8A0F5DCA8F

List of issues that are fixed by the update
The Outlook 2002 Security Patch: KB828040 includes the following earlier released updates for Outlook 2002:

331866 Outlook 2002 update: December 4, 2002

The Outlook 2002 Security Patch: KB828040 fixes the issues that are described in the following Microsoft hotfix package articles:

822614 Outlook 2002 post-Service Pack 2 hotfix package: July 1, 2003

827970 Outlook 2002 post-Service Pack 2 hotfix package: September 12, 2003

823956 Outlook 2002 post-Service Pack 2 hotfix package: July 18, 2003

823970 Availability of the Outlook 2002 post-Service Pack 2 hotfix package: August 10, 2003

825813 Availability of the Outlook 2002 post-Service Pack 2 hotfix package: August 15, 2003

827137 Availability of the Outlook 2002 post-Service Pack 2 hotfix package: August 22, 2003

827146 Outlook 2002 post-Service Pack 2 hotfix package: August 29, 2003

823968 Outlook 2002 post-Service Pack 2 hotfix package: July 27, 2003

Outlook 2002 Security Patch: KB828040 fixes the issues that are described in the following Microsoft Knowledge Base articles:

330981 OL2002: Error message: The Exchange mailbox conferencing resource is not configured properly

817270 OL2002: Outlook phone dialer dials a zero before dialing an internal phone number

810488 An HTML-formatted e-mail message is not received by a recipient that uses a different e-mail protocol when it is sent in Outlook 2002

812478 OL2002: AlwaysSign or AlwaysEncrypt policy is not enforced on replied or forwarded messages

327573 Line breaks are not inserted as expected in the text of an e-mail message in Outlook 2002

329431 OL2000: Changes to a forwarded message cause undesirable changes to the original message

811950 OL2002: Transport provider is not notified if configuration changes when the provider is subscribed to the nkConfigHasChanged event

814377 OL2002: &quot;Can't open this item. Operations on message headers can not be performed in this folder&quot; error message when you open mail

814563 OL2002: Runtime error when you add a shortcut to your Windows NT 4.0-based computer

814556 OL2002: Error message: Microsoft Outlook could not access the specified folder location

814993 OL2002: Offline address book is downloaded when you configure Outlook for offline use

813949 OL2002: Remote mail downloads headers for deleted messages

815355 OL2002: The Free/Busy bar incorrectly displays busy for the whole day

816140 Info bar not updated when delegate accepts an exception to recurring meeting request

812480 OL2002: Outlook View Control returns only the current date

816020 OL2002: A calendar that you save as a Web page shows no appointments on the last day

814554 OL2002: &quot;Set ActiveExplorer.CurrentFolder = Session.GetDefaultFolder(olFolder<FolderName>)&quot; does not work as expected in the FolderSwitch event

816477 OL2002: You cannot send plain text only messages by using Extended MAPI

813565 OL2002: The &quot;Duplicate Contact Detected&quot; dialog box is not displayed when you save a contact that already exists to the Contacts folder

817030 OL2002: Public folder home page not available offline with no network connection

817325 OL2002: File As format changes to first name and last name

817420 OL2002: Error message: &quot;Resource has declined your meeting because it is recurring&quot;

818581 OL2002: Programmatically inserted attachment has blank icon and no caption

819103 OL2002: Keyboard language changes to a different language when you start Microsoft Outlook

818900 OL2002: File path does not convert to UNC when inserted as a hyperlink

819538 OL2002: E-mail messages that you send are lost if you pasted the address from a received e-mail message

819969 OL2002: The wrong name becomes the focus in the list of e-mail messages when you type a DBCS for the first character of the sender's display name

820367 OL2002: Error message in the Mso.dll file when you reply to an e-mail message that was sent by using the &quot;Have Replies Sent To&quot; option

820368 OL2002: The incorrect date and time appears for read receipts

820722 OL2002: Rules appear as turned off in the Rules Wizard

820733 OL2002: Programmatically inserted attachment has bank icon and no text

821188 OL2002: Error message &quot;...The server is not available...&quot; when you work offline

821291 OL2002:&quot;The document entered into the Office document field is not associated with an Office application...&quot; error message when you attach a Microsoft Office document to your online meeting request

819971 OL2002: Incorrect e-mail address in To box

817422 OL2002: &quot;Always Ask Before Opening This Type of File&quot; check box not available

821468 OL2002: Cannot set a filter when you programmatically create a Calendar View

821667 OL2002: You cannot use the Outlook Databinding control to view another user's Outlook folder

821804 OL2002: Tasks folder is repeatedly duplicated when you view the Mailbox folder of another user

822115 OL2002: Items in Sent Items folder may show as sent when the items were not delivered

817302 OL2000: Voting buttons are missing from e-mail messages that are opened on a DMS e-mail system

822846 OL2002: The attendee status is reset after you add a new attendee to a recurring meeting

822558 Custom form action causes Outlook to quit unexpectedly

823232 OL2002: The To box is automatically populated with recipients when you forward a meeting request

323612 OL2002: Error message: Microsoft LDAP Directory: Can't contact LDAP directory server (81)

813506 OL2002: &quot;The value for appointment busy status is not valid&quot; error message when you try to open an appointment

329098 OL2002: Add-ins are disabled if a process first starts Outlook

The Outlook 2002 Security Patch: KB828040 fixes the following issues that were previously not documented in the Microsoft Knowledge Base.

You can pass duplicate parameters to Outlook.exe
You can pass duplicate command line parameters to Outlook.exe.

If you remove Nortel encryption on a message, you may remove the text of the message
When you have a message in a personal folders (.pst) file that encrypted and signed with a Nortel certificate, and then you remove the encryption but leave the message signed, the body of the message becomes blank.

Word is not your e-mail editor when you add a custom user property
If you add a custom user property to an e-mail message in Microsoft Outlook, Microsoft Word no longer starts as your default e-mail editor when you try to forward or to reply to the modified e-mail message.

Note This problem occurs in both Rich Text Format (RTF) and HTML formatted e-mail messages.

Keywords: kbsecurity kbinfo kbupdate KB828040

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.