Microsoft KB Archive/826293

= Description of the Access 2002 Snapshot Viewer security patch: September 3, 2003 =

Article ID: 826293

Article Last Modified on 1/9/2007

-

APPLIES TO


 * Microsoft Access 2002 Standard Edition

-





SUMMARY
Microsoft has released an update to Access 2002. This update fixes a flaw in the Microsoft Access Snapshot Viewer control that may potentially permit an attacker to run their code on the system of a user if the user visits a malicious Web site.

Additionally, several other fixes have been included that are described in the &quot;List of Issues That Are Fixed by the Update&quot; section. The Access 2002 update is part of the continued effort by Microsoft to provide the latest product updates to you.

This article describes how to download and how to install the Access 2002 Snapshot Viewer Security Patch: KB826293.



How to Download and Install the Update
Important Before you install this update, make sure that your system meets the following requirements:  Microsoft Windows Installer 2.0

Before you install this update, you must install Windows Installer 2.0 or later. For additional information about this requirement, see the &quot;Windows Installer Update Requirements&quot; section. Microsoft Office XP Service Pack 2 (SP-2)

Before you install this update, you must install Office XP Service Pack 2. For additional information about how to install Office XP Service Pack 2, click the following article number to view the article in the Microsoft Knowledge Base:

325671 OFFXP: Overview of the Office XP Service Pack 2



Client Update
If you installed Access from a CD-ROM, you can use either of the following options:
 * Use the Microsoft Office Product Updates Web site to install all the latest updates that include all available service packs and all available public updates.
 * Install only the Access 2002 Snapshot Viewer Security Patch: KB826293 by following the steps that are described in this article.

Note Microsoft recommends that you install the client update by using the Office Product Updates Web site. The Office Product Updates Web site detects your particular installation of Microsoft Office, and then prompts you to install exactly what you must have to make sure that your Office installation is completely up-to-date.

Use the Office Product Updates Web Site
For additional information about Office product updates, visit the following Microsoft Web site:

http://office.microsoft.com/ProductUpdates/default.aspx

After detection is complete, you receive a list of recommended updates for your approval. Click Start Installation to complete the process.

Install Only the Access 2002 Snapshot Viewer Security Patch: KB826293
The following file is available for download from the Microsoft Download Center:

Download the OfficeXP-KB826293-Client-ENU.exe package now.

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. After you click the link to download the update follow these steps:
 * 1) Click Save to save the OfficeXP-KB826293-Client-ENU.exe file to the selected folder.
 * 2) In Windows Explorer, double-click OfficeXP-KB826293-Client-ENU.exe.
 * 3) If you are prompted to install the update, click Yes.
 * 4) To accept the License Agreement, click Yes.
 * 5) Insert your Office XP CD-ROM when you are prompted, and then click OK.
 * 6) When you receive a message that indicates that the installation is successful, click OK.

Note After you install the update, you cannot remove it. To revert to an installation before the update was installed, you must remove Office XP, and then install it again from the original CD-ROM.

Administrative Update
If you installed your Office XP product from a server location, the server administrator must update the server location with the administrative update and then deploy that update to your computer.

The following file is available for download from the Microsoft Download Center:

Download the OfficeXP-KB826293-Fullfile-ENU.exe package now.

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

After you click the link to download the update, follow these steps:  To save the OfficeXP-KB826293-Fullfile-ENU.exe file to the selected folder, click Save. In Windows Explorer, double-click OfficeXP-KB826293-Fullfile-ENU.exe. If you are prompted to install the update, click Yes. To accept the License Agreement, click Yes.</li> In the Type the location where you want to place the extracted files box, type C:\KB826293, and then click OK.</li> When you are prompted to create the folder, click Yes.</li> If you are familiar with the procedure for updating your administrative installation, click Start, and then click Run. Type the following command in the Open box:

msiexec /a \ /p C:\KB826293\  SHORTFILENAMES=TRUE

is the path of your administrative installation point for Office XP (for example, C:\OfficeXP). is the Windows Installer (.msi) database package for the Office XP product (for example, Data1.msi). is the name of the administrative update.

Note You can append /qb+ to the command line so that the Office XP Administrative Installation dialog box and the End User License Agreement dialog box do not appear.

Click Start, and then click Run to deploy the update to the client workstations. Type the following command in the Open box:

msiexec /i \  REINSTALL=  REINSTALLMODE=vomu

is the path of your administrative installation point for Office XP (for example, C:\OfficeXP). is the Windows Installer database package for the Office XP product (for example, Data1.msi). is the list of feature names (case-sensitive) that must be reinstalled for the update.

To install all features, you can use REINSTALL=ALL.

For additional information about how to update your administrative installation and how to deploy to client workstations, click the following article number to view the article in the Microsoft Knowledge Base:

301348 How to install a public update to administrative installations of Office XP

This article contains instructions about how to install an administrative public update. For additional information about this article in the Microsoft Office Resource Kit, visit the following Microsoft Web site:

http://www.microsoft.com/office/ork/xp/journ/snpv1001a.htm

</li></ol>

How to Determine Whether the Update Is Installed
The update contains updated versions of the following files: <pre class="fixed_text">  File name      Version --  Snapview.ocx   10.0.5529.0 Snapview.exe  10.0.4622.0 To determine the version of Snapview.exe that is installed on your computer, follow these steps.

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps. <ol> Click Start, and then click Search.</li> In the search results pane under Search Companion, click All files and folders.</li> In the All or part of the file name box, type Snapview.exe, and then click Search.</li> In the list of files, right-click Snapview.exe, and then click Properties.</li> On the Version tab, determine if the update is installed on your computer.

For additional information about how to determine the version of Access 2002 on your computer, click the following article number to view the article in the Microsoft Knowledge Base:

291331 How to check the version of Office XP

</li></ol>

Note If Access 2002 Snapshot Viewer Security Patch: KB826293 is already installed on your computer, and you try to install Access 2002 Snapshot Viewer Security Patch: KB826293, you receive the following error message:

This update has already been applied or is included in an update that has already been applied.

Windows Installer Update Requirements
To install the update that is described in this article, you must have Windows Installer 2.0 or later. Both Microsoft Windows XP and Microsoft Windows 2000 Service Pack 3 (SP3) include Windows Installer 2.0 or later. For additional information about how to install the latest version of Windows Installer for Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition (Me), visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-b702-de3bb768148f%20&displaylang=en

For additional information about how to install the latest version of Windows Installer for Microsoft Windows NT 4.0 and Windows 2000, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=4b6140f9-2d36-4977-8fa1-6f8a0f5dca8f&DisplayLang=en

List of Issues That Are Fixed by the Update
The Access 2002 Snapshot Viewer Security Patch: KB826293 fixes the following issues that were not previously documented in the Microsoft Knowledge Base.

Non-Linked SnapShot Object May Appear with Desktop Color
When you insert a SnapShot object (.snp) without linking the object to a document, you may not see the object. The SnapShot object may appear with the same color as the desktop.

New ClassID Added to Snapshot.ocx
This fix updates Office Web Component (OWC) to support the original GUID and the ClassID for Microsoft Internet Explorer.

SnapShot Viewer May Load a File Across a Domain
This update corrects a problem that occurs if you use the Access SnapShot Viewer control on a page. You may be able to load a SnapShot file from a different domain.

SnapShot Viewer May Quit Unexpectedly or Give an Error
When you open an Access SnapShot Viewer file (*.snp), Access SnapShot Viewer may quit unexpectedly, or you may receive the following error message:

An error occurred while opening a Snapshot file.

Snapview.ocx Is Not Registered Correctly
This update corrects a problem where Snapview.ocx does not correctly register itself.

CSnapshotViewerControl May Cause Access to Quit Unexpectedly
This update corrects a problem where Access may quit unexpectedly when you make a programming call to CSnapshotViewerControl::InitViewingFromStg.

Keywords: kbsetup atdownload kbdownload kbhowto kbinfo kbupdate KB826293

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.