Microsoft KB Archive/885876

= Important information that you must know about the MS04-028 security updates if you are using Windows XP Service Pack 2 =

Article ID: 885876

Article Last Modified on 12/4/2007

-

APPLIES TO


 * Microsoft Windows XP Service Pack 2
 * Microsoft Project 2002 Professional Edition
 * Microsoft Project 2002 Standard Edition
 * Microsoft Visio 2002 Professional Edition
 * Microsoft Visio 2002 Standard Edition
 * Microsoft Office XP Professional Edition
 * Microsoft Office XP Small Business Edition
 * Microsoft Office XP Standard Edition
 * Microsoft Office XP Standard Edition for Students and Teachers
 * Microsoft Office XP Developer Edition
 * Microsoft Access 2002 Standard Edition
 * Microsoft Excel 2002 Standard Edition
 * Microsoft FrontPage 2002 Standard Edition
 * Microsoft Outlook 2002 Standard Edition
 * Microsoft PowerPoint 2002 Standard Edition
 * Microsoft Word 2002 Standard Edition

-



SUMMARY
''The 832332 (Microsoft Office XP), 831932 (Microsoft Visio 2002), or 831931 (Microsoft Project 2002) security updates that Microsoft security bulletin MS04-028 describes may appear to install correctly on your Microsoft Windows XP Service Pack 2 (SP2)-based computer. However, the original versions of these updates that were released on September 14, 2004 may not successfully finish installing if you previously installed one of the software updates for Office XP, Visio 2002, or Microsoft Project 2002 that are documented in Microsoft Knowledge Base article 886992.

To resolve this issue:''


 * Install Critical Update 885884 by using the Automatic Updates feature or the Microsoft Windows Update Web site.
 * Install the revised versions of the 832332, 831932, or 831931 security updates that were released on October 12, 2004 from the Office Update Web site.

This article also includes alternative methods that advanced users and IT Professionals can use to resolve this issue or to determine whether client computers are affected by this issue.



Contents

 * Symptoms
 * Cause
 * Resolution
 * Single computer users
 * Automatic Updates or Windows Update
 * Office Update
 * Repair Office
 * Enterprise customers
 * Install revised security updates
 * Install Critical Update 885884
 * The MS04-028 update scanning tools
 * Repair Office
 * MORE INFORMATION
 * Use the Microsoft Baseline Security Analyzer (MBSA)
 * Verify the version of the Mso.dll file



SYMPTOMS
The following security updates may appear to install correctly on your Windows XP Service Pack 2 (SP2)-based computer:

However, the installation of the original versions of these updates that was released on September 14, 2004, may not correctly update the Mso.dll file in your %Programfiles%\Common Files\Microsoft Shared\Office10 folder. See the &quot;How to determine whether you are affected&quot; section to determine whether this issue affects you.

Note This issue only affects the original security updates that were released on September 14, 2004. The original security update packages that are affected by this issue are named Officexp-kb - - .exe. For example, the original English client security update package for Security Update 832332 is named Officexp-kb832332-client-enu.exe.

On October 12, 2004, the 832332, 831932, and 831931 security updates were re-released to address the issue that is described in this article. The re-released updates that resolve this issue are named Officexp-kb -v2- - v2.exe. For example, the re-released update package for Security Update 832332 is named Officexp-kb832332-v2-client-enu.exe.

back to the top



CAUSE
This issue occurs if you have previously installed one of the software updates for Office XP, Visio 2002, or Microsoft Project 2002 that are documented in Microsoft Knowledge Base article 886992 on a Windows XP SP2-based computer.

Note The following broadly released software updates may cause this issue:

833858 Description of Office XP update: March 23, 2004

831931 Description of the Microsoft Project 2002 security update: October 12, 2004

832668 Office XP Alternative User Input Update: November 9, 2004

831932 Description of the Visio 2002 security update: October 12, 2004

830241 Description of Microsoft Project 2002 Service Pack 1

back to the top



Single computer users
If your computer has not been updated correctly, you have the following options:
 * You can install the revised update. To do this, use either the method that is described in the &quot;Automatic Updates or Windows Update&quot; section, or the method that is described in the &quot;Office Update&quot; section.
 * You can repair Office. To do this, follow the instructions that are in the &quot;Repair Office&quot; section.

Automatic Updates or Windows Update
To resolve this issue, use the Automatic Update feature or use the Windows Update Web site to install Critical Update 885884.

For additional information about configuring the Automatic Update feature in Windows XP, click the following article number to view the article in the Microsoft Knowledge Base:

306525 How to configure and use Automatic Updates in Windows XP

To install this update from the Windows Update Web site, follow these steps:  Visit the following Microsoft Web site:

http://windowsupdate.microsoft.com/

 Click Express Install (Recommended). If your computer is affected by this issue, Critical Update 885884 is automatically selected for you to install. Click Install. Review and accept the End User License Agreement (EULA).

Critical Update 885884 will be downloaded to your computer, and the Setup wizard will help you install it. For additional information about the 885884 critical update, click the following article number to view the article in the Microsoft Knowledge Base:

885884 Description of the critical update for Office XP on Windows XP Service Pack 2

back to the top

Office Update
To resolve this issue, install the revised 832332, 831932, or 831931 security updates from the Office Update Web site. To do this, follow these steps:  Visit the following Microsoft Web site:

http://officeupdate.microsoft.com

</li> Click Check for Updates.

The Office Update Web site will scan your computer for installed updates.</li> If you are affected by this issue, the re-released updates will be listed in the &quot;Updates for Office XP&quot; section.</li> Click Start Installation, and then follow the instructions that appear on the screen to install the appropriate re-released security updates.</li></ol>

back to the top

Repair Office
To resolve this issue, repair your installation of Office XP. To do this, follow these steps:
 * 1) Click Start, click Run, type appwiz.cpl in the Open box, and then press ENTER.
 * 2) Click Change or Remove Programs.
 * 3) In the list of currently installed programs, click your Microsoft Office XP, Microsoft Project 2002, or Visio 2002 product in the list of installed products.
 * 4) Click Click here for support information.
 * 5) Click Repair.

Note If you installed your Office XP product from a CD-ROM, you may be prompted for your CD-ROM during the Detect and Repair process. If you installed your Office product from a network share and the network share is not available during the Detect and Repair process, you may be prompted for the location of the network resource that holds your Microsoft Office installation source files.
 * 1) If you are prompted to restart your computer, click Yes.

back to the top

Enterprise customers
To resolve this issue, use one of the following methods.

Note We recommend that you use the method that is described in the “Install revised security updates” section.

Install revised security updates
To resolve this issue, install the revised version of the affected security updates that are associated with MS04-028, released on October 12, 2004, by using the Office Update Web site or by downloading and installing the appropriate updates from the Microsoft Download Center: <ul> Office XP:

http://www.microsoft.com/downloads/details.aspx?FamilyId=7D128614-6D34-49DF-8D63-6C17E9A2D312

</li> Visio 2002:

http://www.microsoft.com/downloads/details.aspx?FamilyId=16C2DFFD-7B73-43C4-AB0D-2B5EFC80EB63

</li> Microsoft Project 2002:

http://www.microsoft.com/downloads/details.aspx?FamilyId=B3EBCCEA-B0E4-41C7-A6F4-413864D2CCF3

</li></ul>

back to the top

Install Critical Update 885884
To resolve this issue, install Critical Update 885884.

For additional information about Critical Update 885884, click the following article number to view the article in the Microsoft Knowledge Base:

885884 Description of the critical update for Office XP on Windows XP Service Pack 2

Software Update Services (SUS) may also be used to deploy Critical Update 885884. SUS allows customers to install a service that can download all critical updates, security updates, and service packs as they are posted to the following Microsoft Windows Update Web site:

http://v4.windowsupdate.microsoft.com/en/default.asp

When administrators have approved these updates, SUS will automatically make them available to all preconfigured servers that are running Microsoft Windows Server 2003 and Microsoft Windows 2000, and to desktops that are running Microsoft Windows XP Professional and Microsoft Windows 2000 Professional.

For more information about Software Update services and Windows Update services, the next generation of Software Update services, visit the following Microsoft Web site:

http://technet.microsoft.com/en-us/wsus/bb466186.aspx

back to the top

The MS04-028 Update Scanning Tools
IT Professionals can use one of the MS04-028 update scanning tools to scan computers for the required MS04-028 security updates and apply any missing updates from a local area network share. The tool can be run from a startup or logon script or by a user who has local administrator rights. There are two versions of this tool: <ul> One version is intended for use in environments where Systems Management Server (SMS) or any other enterprise management solution is not used for update management.

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

886988 How to obtain and use the MS04-028 Enterprise Update Scanning Tool in environments that do not use Systems Management Server

</li> One version is intended for use in environments where SMS is used for update management.

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

885920 How to obtain and use the MS04-028 Enterprise Update Scanning Tool in environments that use Systems Management Server 2003 and Systems Management Server 2.0

</li></ul>

back to the top

Repair Office
To resolve this issue, repair your installation of Office XP. To do this, follow these steps:
 * 1) Click Start, click Run, type appwiz.cpl in the Open box, and then press ENTER.
 * 2) Click Change or Remove Programs.
 * 3) In the list of currently installed programs, click your Office XP, Microsoft Project 2002, or Visio 2002 product in the list of installed products.
 * 4) Click Click here for support information.
 * 5) Click Repair.

Note If you installed your Office XP product from a CD-ROM, you may be prompted for your CD-ROM during the Detect and Repair process. If you installed your Office product from a network share and the network share is not available during the Detect and Repair process, you may be prompted for the location of the network resource that holds your Office installation source files.
 * 1) If you are prompted to restart your computer, click Yes.

If you are an administrator and you do not want to reinstall the revised version of the MS04-028 updates individually, you can use the REINSTALL=< > command. Use the following method if you are an administrator and you use the Msiexec.exe command to install updates.

Note Do not use this method if you are updating an administrative image, or if you are updating an administrative installation point.

The following are examples of the command lines that you can use to repair specific Microsoft Office products by using the Msiexec.exe /I REINSTALL=< > command:

For Microsoft Office 2003 (all products), Microsoft Office Project 2003, and Microsoft Office Visio 2003, use the following command line:

Msiexec /i  REINSTALL=ProductNonBootFiles REINSTALLMODE=omu /qb-

For Office XP (all products), Microsoft Project 2002, and Visio 2002, use the followng command line:

Msiexec /i REINSTALL=ProductFiles REINSTALLMODE=omu /qb-

Notes <ul> The  or ProductFiles are case sensitive. To install all the features, you can use the REINSTALL=ALL value, or you can install only the feature that is updated.</li> In these commands,  is the GUID for your Office 2003 or Office XP product. For example, {90110409-6000-11D3-8CFE-0150048383C9} is the GUID for US English Microsoft Office 2003 Professional Enterprise Edition. For your reference, the following articles provide information about the numbering scheme for each Office 2003 and Office XP product.

For additional information, click the following article numbers to view the articles in the Microsoft Knowledge Base:

832672 Description of numbering scheme for product code GUIDs in Office 2003

302663 Description of the numbering scheme for product code GUIDs for Office XP programs

</li></ul>

You can use the command line to install all the updates in a batch file that you can run on the destination computer, or as part of an SMS logon script when the user logs on to the computer.

back to the top

<div class="moreinformation_section">

MORE INFORMATION
If you are not running Windows XP SP2, this issue does not affect you. If you are running Windows XP SP2, use one of the methods in this section to determine whether you are affected by this issue:

Use the Microsoft Baseline Security Analyzer (MBSA)
Use MBSA to determine whether the revised updates (832332, 831932, and 831931) are installed on client computers for local computer scans only. For detailed information about how MBSA detects Office updates, visit the following Microsoft Web site:

http://office.microsoft.com/en-us/assistance/HA010884161033.aspx

For additional information about the programs that MBSA does not detect, click the following article number to view the article in the Microsoft Knowledge Base:

306460 Microsoft Baseline Security Analyzer (MBSA) returns note messages for some updates

For more information about MBSA and to obtain MBSA, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/tools/mbsahome.mspx

back to the top

Verify the version of the Mso.dll file
The affected updates do not install the correct version of the Mso.dll file. Therefore, you can determine whether you are affected by this issue by manually checking the version of the Mso.dll file in your %Programfiles%\Common Files\Microsoft Shared\Office10 folder. To do this, follow these steps:
 * 1) Click Start, click Run, type %Programfiles%\Common Files\Microsoft Shared\Office10, and then click OK.
 * 2) Right-click the Mso.dll file, and then click Properties.
 * 3) On the Version tab, note the version number of the Mso.dll file. If the version number is not 10.0.6714.0 or a later version, you may be affected by this issue.

back to the top

Additional query words: Off2002 offxp vis2002 vis2k2 visxp prj2002 prj2k2 prjxp

Keywords: kbsecurity kbtshoot KB885876

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.