Microsoft KB Archive/328043

= Description of the Microsoft Project 2002 Update: August 20, 2002 =

Article ID: 328043

Article Last Modified on 11/2/2004

-

APPLIES TO


 * Microsoft Project 2002 Standard Edition
 * Microsoft Project 2002 Professional Edition
 * Microsoft Office Web Components

-



This article was previously published under Q328043



SUMMARY
Microsoft has released an update to Microsoft Project Standard 2002 and Microsoft Project Professional 2002. This update includes security fixes for Microsoft Office Web Components (OWC).

This article describes how to download and install the Microsoft Project 2002 Update: August 20, 2002.



How to Download and Install the Update
To download and install the Microsoft Project 2002 Update, follow these steps:
 * 1) Visit the following Microsoft Web site:

http://download.microsoft.com/download/msftproject2002/prj1001/10/WIN98MeXP/EN-US/prj1001.exe
 * 1) Click Download Now, click Save this program to disk, and then click OK.
 * 2) Click Save to save the Prj1001.exe file to the selected folder.
 * 3) In Windows Explorer, double-click Prj1001.exe.
 * 4) If you are prompted to install the update, click Yes.
 * 5) Click Yes to accept the License Agreement.
 * 6) When you receive a message that indicates the installation was successful, click OK.

NOTE: After you install the update, you cannot remove it.

How to Determine Whether the Security Update Is Installed
After the Project 2002 Update is installed, the following file has the listed attribute or later:

  File name     Version --  Owc10.dll  10.0.4109.0

By default, the Owc10.dll file is in the following location on your computer:



where  is the drive that Microsoft Project is installed on.

To check the file version, follow these steps:
 * 1) Right-click Start, and then click Explorer.
 * 2) In Windows Explorer, locate the updated file (Owc10.dll), right-click the file, and then click Properties.
 * 3) Click the Version tab.

Issues Fixed by the Update
The update fixes the issues described in the following Microsoft Knowledge Base articles:

309389 OFFXP: Loading XML File in Spreadsheet Component Takes a Long Time

317838 OFFXP: Months Are Sorted Incorrectly, Not Grouped by Year

325834 OFFXP: Web Components Are Static After You Install Publisher 2002

Additional Issues That Are Fixed by Office XP SP-2
Additionally, the issues in this section are also fixed by Office XP SP-2.

Security Fixes
 * The Spreadsheet Component Host functions is exploitable.
 * Spreadsheet Component methods allow script to verify that a file exists without doing cross-domain checks.
 * Spreadsheet copy and paste functions ignore the Allow paste operations via script security setting when it is turned off in Internet Explorer.
 * Various Office Web Component Load methods can be used to inventory files on the hard disk.

Keywords: kbdownload kbfix atdownload KB328043

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.