Microsoft KB Archive/828040

From BetaArchive Wiki

Article ID: 828040

Article Last Modified on 12/15/2006



APPLIES TO

  • Microsoft Outlook 2002 Standard Edition



SUMMARY

Microsoft has released an update to Microsoft Outlook 2002. This update offers the highest levels of stability and security for Outlook 2002. The update also addresses a flaw that could enable an attacker to bypass the blocking capabilities of Microsoft Outlook command-line parameters. The appropriate warning dialog boxes will appear. This update is part of Microsoft’s continued effort to provide the latest product updates to customers.

This article describes how to download and install the Outlook 2002 Security Patch: KB828040.

Note Microsoft Office XP Service Pack 3 includes all the fixes that are found in the Outlook 2002 Security Patch: KB828040.

For additional information about how to install Office XP Service Pack 3, click the following article number to view the article in the Microsoft Knowledge Base:

832671 Overview of Microsoft Office XP Service Pack 3


MORE INFORMATION

How to download and install the administrative version of the Outlook 2002 Security Patch: KB828040

Important Before you install this update, make sure that the following requirements have been met:

  • Microsoft Windows Installer 2.0

    Before you install this update, you must install Windows Installer 2.0 or later. For additional information about this requirement, see the "Windows Installer update requirements" section of this article.
  • Microsoft Office XP Service Pack 2

    Before you install this update, install Office XP Service Pack 2.

    For additional information about how to install Office XP Service Pack 2, click the following article number to view the article in the Microsoft Knowledge Base:

    325671 OFFXP: Overview of the Office XP Service Pack 2

    Note The full-file Outlook 2002 Security Patch: KB828040 installs successfully on Office XP Service Pack 1 or Office XP Service Pack 2 installations.

The following file is available for download from the Microsoft Download Center:
[GRAPHIC: Download]Download the English version of the Outlook 2002 Security Patch: KB828040 package now.
For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services


Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
Note To obtain a localized version of the Outlook 2002 Security Patch: KB828040 package, visit the following Microsoft Web site:

If you are the server administrator, follow these steps to update the server location with the administrative update and deploy the update:

  1. Click Save to save the Officexp-kb828040-fullfile-enu.exe file to the selected folder.
  2. In Microsoft Windows Explorer, double-click officexp-kb828040-fullfile-enu.exe.
  3. Click Yes to accept the License Agreement.
  4. In the Type the location where you want to place the extracted files box, type c:\828040, and then click OK.
  5. Click Yes when you are prompted to create the folder.
  6. If you are familiar with the procedure for updating your administrative installation, click Start, and then click Run. Type the following command in the Open box where Admin Path is the path of your administrative installation point for Microsoft Office XP (for example, C:\OfficeXP), MSI File is the .msi database package for the Office XP product (for example, ProPlus.msi), and MSP File is the name of the administrative update (for example, OUTLOOKff.msp):

    msiexec /a AdminPath\MSI File /p C:\828040\MSP File SHORTFILENAMES=TRUE

    Note You can append /qb+ to the command line so that the Office XP AdministrativeInstallation dialog box and the End User LicenseAgreement dialog box do not appear.
  7. To deploy the update to the client workstations, click Start, and then click Run. Type the following command in the Open box where Admin Path is the path of your administrative installation point for Office XP (for example, C:\OfficeXP), MSI File is the MSI database package for the Office XP product (for example, ProPlus.msi), and FeatureList is the list of feature names (case sensitive) that have to be reinstalled for the update:

    msiexec /i AdminPath\MSI FileREINSTALL=Feature List REINSTALLMODE=vomu

    To install all features, you can use REINSTALL=ALL, or you can install the following features:

    OUTLOOKNonBootFiles,OUTLOOKFiles

Note After you install the update, you cannot remove it.

For additional information about how to update your administrative installation and deploy to client workstations, click the following article number to view the article in the Microsoft Knowledge Base:

301348 HOW TO: Install a public update to administrative installations of Office XP


This article contains standard instructions for installing an administrative public update. You can also see the following article in the Microsoft Office Resource Kit:

How to determine whether the update is installed

The update contains updated versions of the following files:

   File name      Version
   -----------------------
   OUTLOOK.EXE   10.0.5709.0
   DLGSETP.DLL   10.0.5626.0
   ENVELOPE.DLL  10.0.4817.0
   EXCHCSP.DLL   10.0.5328.0
   EXSEC32.DLL   10.0.4907.0
   IMPMAIL.DLL   10.0.4406.0
   OUTLCM.DLL    10.0.5424.0
   OUTLCTL.DLL   10.0.5112.0
   OUTLLIB.DLL   10.0.5709.0
   OUTLMIME.DLL  10.0.4608.0
   OUTLPH.DLL    10.0.5703.0
   RECALL.DLL    10.0.4721.0

You do not have to install this update if you have a later version of one or more of the files that are listed in the table.

To determine the version of Outlook that is installed on your computer, follow these steps.

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.

  1. Click Start, and then click Search.
  2. In the Search Results pane, click All files and folders under Search Companion.
  3. In the All or part of the file name box, type Outlook.exe, and then click Search.
  4. In the list of files, right-click Outlook.exe, and then click Properties.
  5. On the Version tab, determine the version of Outlook that is installed on your computer.

For additional information about how to determine the version of product 2002 on your computer, click the following article number to view the article in the Microsoft Knowledge Base:

291331 HOW TO: Check the version of Office XP


Note If the Outlook 2002 Security Patch: KB828040 is already installed on your computer, you receive the following error message when you try to install the Outlook 2002 Security Patch: KB828040:

This update has already been applied or is included in an update that has already been applied.

Windows Installer update requirements

To install the update that is described in this article, you must have Windows Installer 2.0 or later installed. Both Microsoft Windows XP and Microsoft Windows 2000 Service Pack 3 (SP3) include Windows Installer 2.0 or later. To install the latest version of the Windows Installer, visit one of the following Microsoft Web sites.

Windows Installer for Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition (Me):

Windows Installer for Microsoft Windows NT 4.0 and Windows 2000:

List of issues that are fixed by the update

The Outlook 2002 Security Patch: KB828040 includes the following earlier released updates for Outlook 2002:

331866 Outlook 2002 update: December 4, 2002



The Outlook 2002 Security Patch: KB828040 fixes the issues that are described in the following Microsoft hotfix package articles:

822614 Outlook 2002 post-Service Pack 2 hotfix package: July 1, 2003


827970 Outlook 2002 post-Service Pack 2 hotfix package: September 12, 2003


823956 Outlook 2002 post-Service Pack 2 hotfix package: July 18, 2003


823970 Availability of the Outlook 2002 post-Service Pack 2 hotfix package: August 10, 2003


825813 Availability of the Outlook 2002 post-Service Pack 2 hotfix package: August 15, 2003


827137 Availability of the Outlook 2002 post-Service Pack 2 hotfix package: August 22, 2003


827146 Outlook 2002 post-Service Pack 2 hotfix package: August 29, 2003


823968 Outlook 2002 post-Service Pack 2 hotfix package: July 27, 2003


Outlook 2002 Security Patch: KB828040 fixes the issues that are described in the following Microsoft Knowledge Base articles:

330981 OL2002: Error message: The Exchange mailbox conferencing resource is not configured properly


817270 OL2002: Outlook phone dialer dials a zero before dialing an internal phone number


810488 An HTML-formatted e-mail message is not received by a recipient that uses a different e-mail protocol when it is sent in Outlook 2002


812478 OL2002: AlwaysSign or AlwaysEncrypt policy is not enforced on replied or forwarded messages


327573 Line breaks are not inserted as expected in the text of an e-mail message in Outlook 2002


329431 OL2000: Changes to a forwarded message cause undesirable changes to the original message


811950 OL2002: Transport provider is not notified if configuration changes when the provider is subscribed to the nkConfigHasChanged event


814377 OL2002: "Can't open this item. Operations on message headers can not be performed in this folder" error message when you open mail


814563 OL2002: Runtime error when you add a shortcut to your Windows NT 4.0-based computer


814556 OL2002: Error message: Microsoft Outlook could not access the specified folder location


814993 OL2002: Offline address book is downloaded when you configure Outlook for offline use


813949 OL2002: Remote mail downloads headers for deleted messages


815355 OL2002: The Free/Busy bar incorrectly displays busy for the whole day


816140 Info bar not updated when delegate accepts an exception to recurring meeting request


812480 OL2002: Outlook View Control returns only the current date


816020 OL2002: A calendar that you save as a Web page shows no appointments on the last day


814554 OL2002: "Set ActiveExplorer.CurrentFolder = Session.GetDefaultFolder(olFolder<FolderName>)" does not work as expected in the FolderSwitch event


816477 OL2002: You cannot send plain text only messages by using Extended MAPI


813565 OL2002: The "Duplicate Contact Detected" dialog box is not displayed when you save a contact that already exists to the Contacts folder


817030 OL2002: Public folder home page not available offline with no network connection


817325 OL2002: File As format changes to first name and last name


817420 OL2002: Error message: "Resource has declined your meeting because it is recurring"


818581 OL2002: Programmatically inserted attachment has blank icon and no caption


819103 OL2002: Keyboard language changes to a different language when you start Microsoft Outlook


818900 OL2002: File path does not convert to UNC when inserted as a hyperlink


819538 OL2002: E-mail messages that you send are lost if you pasted the address from a received e-mail message


819969 OL2002: The wrong name becomes the focus in the list of e-mail messages when you type a DBCS for the first character of the sender's display name


820367 OL2002: Error message in the Mso.dll file when you reply to an e-mail message that was sent by using the "Have Replies Sent To" option


820368 OL2002: The incorrect date and time appears for read receipts


820722 OL2002: Rules appear as turned off in the Rules Wizard


820733 OL2002: Programmatically inserted attachment has bank icon and no text


821188 OL2002: Error message "...The server is not available..." when you work offline


821291 OL2002:"The document entered into the Office document field is not associated with an Office application..." error message when you attach a Microsoft Office document to your online meeting request


819971 OL2002: Incorrect e-mail address in To box


817422 OL2002: "Always Ask Before Opening This Type of File" check box not available


821468 OL2002: Cannot set a filter when you programmatically create a Calendar View


821667 OL2002: You cannot use the Outlook Databinding control to view another user's Outlook folder


821804 OL2002: Tasks folder is repeatedly duplicated when you view the Mailbox folder of another user


822115 OL2002: Items in Sent Items folder may show as sent when the items were not delivered


817302 OL2000: Voting buttons are missing from e-mail messages that are opened on a DMS e-mail system


822846 OL2002: The attendee status is reset after you add a new attendee to a recurring meeting


822558 Custom form action causes Outlook to quit unexpectedly


823232 OL2002: The To box is automatically populated with recipients when you forward a meeting request


323612 OL2002: Error message: Microsoft LDAP Directory: Can't contact LDAP directory server (81)


813506 OL2002: "The value for appointment busy status is not valid" error message when you try to open an appointment


329098 OL2002: Add-ins are disabled if a process first starts Outlook




The Outlook 2002 Security Patch: KB828040 fixes the following issues that were previously not documented in the Microsoft Knowledge Base.

You can pass duplicate parameters to Outlook.exe

You can pass duplicate command line parameters to Outlook.exe.



If you remove Nortel encryption on a message, you may remove the text of the message

When you have a message in a personal folders (.pst) file that encrypted and signed with a Nortel certificate, and then you remove the encryption but leave the message signed, the body of the message becomes blank.


Word is not your e-mail editor when you add a custom user property

If you add a custom user property to an e-mail message in Microsoft Outlook, Microsoft Word no longer starts as your default e-mail editor when you try to forward or to reply to the modified e-mail message.

Note This problem occurs in both Rich Text Format (RTF) and HTML formatted e-mail messages.


Keywords: kbsecurity kbinfo kbupdate KB828040