Knowledge Base

Description of the Access 2000 Snapshot Viewer security patch: September 3, 2003

Article ID: 826292

Article Last Modified on 5/21/2007

APPLIES TO

Microsoft Access 2000 Standard Edition

SUMMARY

Microsoft has released an update to Microsoft Access 2000. This update fixes a flaw in the Microsoft Access Snapshot Viewer control that could enable an attacker to execute code of their choice on a user’s system if the user visits a mailicious Web site. Additionally, several other fixes have been included. These fixes are described in the "List of Issues Fixed by the Update" section in this article. This Access 2000 update is part of the continued effort by Microsoft to provide the latest product updates to customers.

This article describes how to download and to install the Access 2000 Snapshot Viewer Security Patch: KB826292.

MORE INFORMATION

How to Download and to Install the Update

Important Before you install this update, make sure that your system meets the following requirements:

Microsoft Windows Installer 2.0
Before you install this update, you must install Windows Installer 2.0 or later. For additional information about this requirement, see the "Windows Installer Update Requirements" section of this article.
Office 2000 Service Pack 3 (SP-3)
Before you install this update, install Office 2000 SP-3. For additional information about how to install Office 2000 Service Pack 3, click the following article number to view the article in the Microsoft Knowledge Base:

326585 OFF2000: Overview of Office 2000 Service Pack 3

Client Update

If you installed Access from a CD-ROM, you can use either of the following options:

Use the Office Product Updates Web site to automatically install all the latest updates that include all available service packs and public updates.
Install only the Access 2000 Snapshot Viewer Security Patch: KB826292 by following the steps that are described in this article.

Note Microsoft recommends that you install the client update by using the Office Product Updates Web site. The Office Product Updates Web site detects your particular installation of Microsoft Office and prompts you to install exactly what you must have to make sure that your Office installation is completely up-to-date.

Use the Office Product Updates Web Site

To have the Office Product Updates Web site detect the required updates that you must install on your computer, visit the following Microsoft Web site:

http://office.microsoft.com/ProductUpdates/default.aspx

After detection is complete, you receive a list of recommended updates for your approval. Click Start Installation to complete the process.

Install Only the Access 2000 Snapshot Viewer Security Patch: KB826292

The following file is available for download from the Microsoft Download Center:
Download the Office2000-KB826292-Client-ENU.exe package now.

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. After you click the link to download the update, follow these steps:

Click Save to save the Office2000-KB826292-Client-ENU.exe file to the selected folder.
In Windows Explorer, double-click Office2000-KB826292-Client-ENU.exe.
If you are prompted to install the update, click Yes.
Click Yes to accept the License Agreement.
Insert your Office 2000 CD-ROM when you are prompted to do so, and then click OK.
When you receive a message that indicates the installation was successful, click OK.

Note After you install the update, you cannot remove it. To revert to an installation before the update was installed, you must remove Office 2000, and then install it again from the original CD-ROM.

Administrative Update

If you installed your Office 2000 product from a server location, the server administrator must update the server location with the administrative update and deploy that update to your computer.

The following file is available for download from the Microsoft Download Center:
Download the Office2000-kb826292-fullfile-enu.exe package now.

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file. After you click the link to download the update, follow these steps:

Click Save to save the Office2000-kb826292-fullfile-enu.exe file to the selected folder.
In Windows Explorer, double-click Office2000-kb826292-fullfile-enu.exe.
If you are prompted to install the update, click Yes.
Click Yes to accept the License Agreement.
In the Type the location where you want to place the extracted files box, type c:\kb826292, and then click OK.
Click Yes when you are prompted to create the folder.
If you are familiar with the procedure for updating your administrative installation, click Start, and then click Run. Type the following command in the Open box:

msiexec /a Admin Path\MSI File /p C:\kb826292\MSP File SHORTFILENAMES=TRUE

Admin Path is the path to your administrative installation point for Office 2000 (for example, C:\Office2000), MSI File is the .msi database package for the Office 2000 product (for example, Data1.msi), and MSP File is the name of the administrative update.

Note You can append /qb+ to the command line so that the Office 2000 Administrative Installation dialog box and the End User License Agreement dialog box do not appear.
To deploy the update to the client workstations, click Start, and then click Run. Type the following command in the Open box:

msiexec /i Admin Path\MSI File REINSTALL=Feature List REINSTALLMODE=vomu

Admin Path is the path to your administrative installation point for Office 2000 (for example, C:\Office2000), MSI File is the MSI database package for the Office 2000 product (for example, Data1.msi), and Feature List is the list of feature names (case sensitive) that have to be reinstalled for the update. To install all features, you can use REINSTALL=ALL, or you can install the following features:
- ACCESSSnapshotFiles
- AccessRuntimeMaster

For additional information about how to update your administrative installation and deploy the update to client workstations, click the following article number to view the article in the Microsoft Knowledge Base:

304165 OFF2000: How to Install a Public Update to an Administrative Installation

This article contains standard instructions for installing an administrative public update. You can also see the following article in the Microsoft Office Resource Kit:

http://office.microsoft.com/en-us/ork2000/HA011524861033.aspx

How to Determine Whether the Update Is Installed

The update contains updated versions of the following files:

   File name      Version
   -------------------------
   Snapview.ocx   10.0.5529.0
   Snapview.exe   10.0.4622.0

To determine if the update is installed on your computer, follow these steps.

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.

Click Start, and then click Search.
In the search results pane, click All files and folders under Search Companion.
In the All or part of the file name box, type Snapview.exe, and then click Search.
In the list of files, right-click Snapview.exe, and then click Properties.
On the Version tab, verify that the update is installed on your computer.

Note If the Access 2000 Snapshot Viewer Security Patch: KB826292 is already installed on your computer, you receive the following error message when you try to install the Access 2000 Snapshot Viewer Security Patch: KB826292:

This update has already been applied or is included in an update that has already been applied.

Windows Installer Update Requirements

To install the update that is described in this article, you must have Windows Installer 2.0 or later. Both Microsoft Windows XP and Microsoft Windows 2000 Service Pack 3 (SP3) include Windows Installer 2.0 or later.

For additional information about how to install the latest version of Windows Installer for Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition (Me), visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-b702-de3bb768148f%20&displaylang=en

For additional information about how to install the latest version of Windows Installer for Microsoft Windows NT 4.0 and Windows 2000, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=4b6140f9-2d36-4977-8fa1-6f8a0f5dca8f&DisplayLang=en

List of Issues Fixed by the Update

The Access 2000 Snapshot Viewer Security Patch: KB826292 fixes the following issues that were previously not documented in the Microsoft Knowledge Base.

Non-linked SnapShot Object May Appear With Desktop Color

When you insert a SnapShot object (.snp file) without linking the object to a document, you may not see the object. The SnapShot object may appear with the same color as the desktop.

New ClassID Added to Snapshot.ocx

This fix updates the Office Web Components (OWC) to support the original GUID and ClassID for Internet Explorer.

SnapShot Viewer May Load a File Across a Domain

If you use the SnapShot viewer control on a page, you may be able to load a SnapShot file from a different domain.

SnapShot Viewer May Quit Unexpectedly or Give An Error

When you open a SnapShot viewer (.snp) file, SnapShot Viewer may quit unexpectedly, or you may receive the following error message:

An error occurred while opening a Snapshot file.

Snapview.ocx Not Registered Correctly

Snapview.ocx does not correctly register itself.

CSnapshotViewerControl May Cause Access To Quit Unexpectedly

Access may quit unexpectedly when you make a programming call to the CSnapshotViewerControl::InitViewingFromStg function.

Keywords: kbinfo kbupdate KB826292

Microsoft KB Archive/826292

Contents