Microsoft KB Archive/827431

= Overview of the Access 2000 Runtime Security Patch: September 3, 2003 =

Article ID: 827431

Article Last Modified on 5/21/2007

-

APPLIES TO


 * Microsoft Office 2000 Developer Edition

-







For a Microsoft Access 2002 version of this article, see 827430.



SUMMARY
Microsoft has released an update to Microsoft Access Runtime 2000. This update fixes a problem where Microsoft Office 2000 documents that are specifically crafted to contain malicious Microsoft Visual Basic for Applications (VBA) projects may run unauthorized code on your computer. This Access 2000 Runtime update is part of the continued effort by Microsoft to provide the latest product updates to customers.

This article describes how to download and to install the Access 2000 Runtime Security Patch: KB827431.



How to Download and Install the Update
Important Before you install this update, make sure that your system meets the following requirements:  Microsoft Windows Installer 2.0

Before you install this update, you must install Windows Installer 2.0 or later. For more information about this requirement, see the &quot;Windows Installer Update Requirements&quot; section of this article. Office 2000 Service Pack 3 (SP-3)

Before you install this update, install Office 2000 SP-3.

For additional information about how to install Office 2000 Service Pack 3, click the following article number to view the article in the Microsoft Knowledge Base:

326585 OFF2000: Overview of Office 2000 Service Pack 3



Office Product Updates Web Site

To have the Office Product Updates Web site detect the required updates that you must install on your computer, visit the following Microsoft Web site:

http://office.microsoft.com/ProductUpdates/default.aspx

After detection is complete, you receive a list of recommended updates for your approval. Click Start Installation to complete the process.

Steps for Developers for Updating Existing Run-time Programs

You can use either of the following two options:
 * Direct Users to the Microsoft Office Product Updates Web site
 * Distribute the Access 2000 Runtime Security Patch: KB827431

Direct Users to the Microsoft Office Product Updates Web Site

One option for updating computers is to have each user visit the Microsoft Office Products Updates Web site and download the update. Microsoft recommends that you install the client update. To do so, visit the Office Product Updates Web site. The Office Product Updates Web site detects your particular installation of Access Runtime and other Microsoft Office components and then prompts you to install exactly what you must have to make sure that your Access Runtime installation is completely up-to-date. To use this option, have each user follow these steps.

Note After you install the update, you cannot remove it. To revert to an installation before the update was installed, you must remove the Access run-time program and then install it again from the original source. Remember to back up any data files before you remove the Access run-time program.  Visit the Microsoft Office Products Updates Web site:

http://office.microsoft.com/ProductUpdates/default.aspx

 Click Check for Updates. Click Access 2000 Runtime Security Patch: KB827431, and then click Start Installation.</li> Click to select the I accept the terms of the license agreement check box, and then click Next.</li> Click Next two times.</li> Click Finish.</li></ol>

Distribute the Access 2000 Runtime Security Patch: KB827431

Another option for updating computers is to download and distribute the client update or the full-file update to users.

Note After you install the update, you cannot remove it. To revert to an installation before the update was installed, you must remove the Access run-time program and then install it again from the original source. Remember to back up any data files before you remove the Access run-time program.

To download and distribute the client update to users, follow these steps: <ol> Download the client version of the Access 2000 Runtime Security Patch: KB827431.

Download the office2000-kb827431-client-enu.exe package now.

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.</li> Distribute the file office2000-kb827431-client-enu.exe to the users.</li> Have the users open Microsoft Windows Explorer, double-click office2000-kb827431-client-enu.exe, and then follow the steps to install.</li></ol>

Note Applying full-file updates directly to client computers is an efficient way to make sure that all users have the most current version of the software when you do not know the updates that users have applied. Additionally, users can apply a full-file patch even if they do not have access to the installation source.

To download and distribute the full-file update to users, follow these steps: <ol> Download the full-file version of the Access 2000 Runtime Security Patch: KB827431.

Download the office2000-kb827431-fullfile-enu.exe package now.

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.</li> Distribute the file office2000-kb827431-fullfile-enu.exe to the users.</li> Have the users open Microsoft Windows Explorer, double-click office2000-kb827431-fullfile-enu.exe, and then follow the steps to install.</li></ol>

For more information about this installation strategy and a comparison of the different update options, visit the following Microsoft Web site:

http://office.microsoft.com/en-us/orkXP/HA011525711033.aspx

How to Determine if the Update Is Installed
The update contains updated versions of the following files: <pre class="fixed_text">  File name      Version --  Vbe6.dll       6.4.99.69 Snapview.exe  10.0.4622.0 Snapview.ocx  10.0.5529.0 To determine if the update is installed on your computer, follow these steps.

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.
 * 1) Click Start, and then click Search.
 * 2) In the Search Results pane under Search Companion, click All files and folders.
 * 3) In the All or part of the file name box, type Snapview.exe, and then click Search.
 * 4) In the list of files, right-click Snapview.exe, and then click Properties.
 * 5) On the Version tab, if the version number is 10.0.4622.0 the update is installed on your computer.

Note If the Access 2000 Runtime Security Patch: KB827431 is already installed on your computer, you receive the following error message when you try to install the Access 2000 Runtime Security Patch: KB827431:

This update has already been applied or is included in an update that has already been applied.

Windows Installer Update Requirements
To install the update that is described in this article, you must have Windows Installer 2.0 or later. Both Microsoft Windows XP and Microsoft Windows 2000 Service Pack 3 (SP3) include Windows Installer 2.0 or later.

For additional information about how to install the latest version of Windows Installer for Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition (Me), visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-b702-de3bb768148f%20&displaylang=en

For additional information about how to install the latest version of Windows Installer for Microsoft Windows NT 4.0 and Windows 2000, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=4b6140f9-2d36-4977-8fa1-6f8a0f5dca8f&DisplayLang=en

List of Issues That Are Fixed by the Update
The Access 2000 Runtime Security Patch: KB827431 fixes the following issues that were previously not documented in the Microsoft Knowledge Base.

Office Documents That Contain Malicious VBA Projects May Run Unauthorized Code
Microsoft Office 2000 documents that are specifically crafted to contain malicious VBA projects may run unauthorized code on your computer.

Non-linked SnapShot Object May Appear With Desktop Color
When you insert a SnapShot object (.snp file) without linking the object to a document, you may not see the object. The SnapShot object may appear with the same color as the desktop.

New ClassID Is Added to Snapshot.ocx
This fix updates the Office Web Component (OWC) to support the original GUID and ClassID for Internet Explorer.

SnapShot Viewer May Load a File Across a Domain
If you use the SnapShot viewer control on a page, you may be able to load a SnapShot file from a different domain.

SnapShot Viewer May Quit Unexpectedly or You Receive an Error Message
When you open a SnapShot Viewer (.snp) file, SnapShot Viewer may quit unexpectedly, or you may receive the following error message:

An error occurred while opening a Snapshot file.

Snapview.ocx Not Registered Correctly
Snapview.ocx may not correctly register itself.

CSnapshotViewerControl May Cause Access To Quit Unexpectedly
Access may quit unexpectedly when you make a programming call to the CSnapshotViewerControl::InitViewingFromStg function.

Keywords: kbdownload kbsecurity kbinfo kbupdate KB827431

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.