Microsoft KB Archive/328043

From BetaArchive Wiki

Article ID: 328043

Article Last Modified on 11/2/2004



APPLIES TO

  • Microsoft Project 2002 Standard Edition
  • Microsoft Project 2002 Professional Edition
  • Microsoft Office Web Components



This article was previously published under Q328043

SUMMARY

Microsoft has released an update to Microsoft Project Standard 2002 and Microsoft Project Professional 2002. This update includes security fixes for Microsoft Office Web Components (OWC).

This article describes how to download and install the Microsoft Project 2002 Update: August 20, 2002.

MORE INFORMATION

How to Download and Install the Update

To download and install the Microsoft Project 2002 Update, follow these steps:

  1. Visit the following Microsoft Web site:


http://download.microsoft.com/download/msftproject2002/prj1001/10/WIN98MeXP/EN-US/prj1001.exe

  1. Click Download Now, click Save this program to disk, and then click OK.
  2. Click Save to save the Prj1001.exe file to the selected folder.
  3. In Windows Explorer, double-click Prj1001.exe.
  4. If you are prompted to install the update, click Yes.
  5. Click Yes to accept the License Agreement.
  6. When you receive a message that indicates the installation was successful, click OK.

NOTE: After you install the update, you cannot remove it.

How to Determine Whether the Security Update Is Installed

After the Project 2002 Update is installed, the following file has the listed attribute or later:

   File name     Version 
   ----------------------
   Owc10.dll  10.0.4109.0
                    

By default, the Owc10.dll file is in the following location on your computer:

drive:\Program Files\Common Files\Microsoft Shared\Web Components\10


where drive is the drive that Microsoft Project is installed on.

To check the file version, follow these steps:

  1. Right-click Start, and then click Explorer.
  2. In Windows Explorer, locate the updated file (Owc10.dll), right-click the file, and then click Properties.
  3. Click the Version tab.

Issues Fixed by the Update

The update fixes the issues described in the following Microsoft Knowledge Base articles:

309389 OFFXP: Loading XML File in Spreadsheet Component Takes a Long Time


317838 OFFXP: Months Are Sorted Incorrectly, Not Grouped by Year


325834 OFFXP: Web Components Are Static After You Install Publisher 2002


Additional Issues That Are Fixed by Office XP SP-2

Additionally, the issues in this section are also fixed by Office XP SP-2.

Security Fixes

  • The Spreadsheet Component Host functions is exploitable.
  • Spreadsheet Component methods allow script to verify that a file exists without doing cross-domain checks.
  • Spreadsheet copy and paste functions ignore the Allow paste operations via script security setting when it is turned off in Internet Explorer.
  • Various Office Web Component Load methods can be used to inventory files on the hard disk.


Keywords: kbdownload kbfix atdownload KB328043