Article ID: 830349
Article Last Modified on 1/17/2007
APPLIES TO
- Microsoft Excel 2000 Standard Edition
SUMMARY
Microsoft has released a patch to Microsoft Excel 2000. This patch fixes a vulnerability under certain scenarios where an Excel 2000 file can be modified in such a way that a macro that includes Microsoft Excel 4.0 Macro Language (XLM) commands could run with no macro security warning issued. Additionally, many other issues are fixed as described later in this article. This Excel 2000 patch is part of the continued effort by Microsoft to provide the latest product updates to customers.
This article describes how to download and install the Microsoft Excel 2000 Security Patch: KB830349.
MORE INFORMATION
How to Download and Install the Patch
Important Before you install this patch, make sure that you meet the following requirements:
- Microsoft Windows Installer 2.0
Before you install this patch, you must install Windows Installer 2.0 or later. For additional information about this requirement, see the "Windows Installer Patch Requirements" section of this article. - Microsoft Office 2000 Service Pack 3 (SP-3)
Before you install this patch, install Office 2000 SP-3.
For additional information about how to install Office 2000 Service Pack 3 , click the following article number to view the article in the Microsoft Knowledge Base:326585 Overview of Office 2000 Service Pack 3
Client Patch
If you installed Excel 2000 from a CD-ROM, you have the following two options:
- Use the Microsoft Office Product Updates Web site to automatically install all the latest updates that include all available service packs and public updates.
- Install only the Excel 2000 Security Patch: KB830349 by following the steps described later in this article.
Note Microsoft recommends that you install the client patch by using the Office Product Updates Web site. The Office Product Updates Web site detects your particular installation of Microsoft Office and prompts you to install exactly what you must have to make sure that your Office installation is completely up-to-date.
Office Product Updates Web Site
To have the Office Product Updates Web site detect the required updates that you must install on your computer, visit the following Microsoft Web site:
After detection is complete, you receive a list of recommended updates for your approval. Click Start Installation to complete the process.
Install Only the Excel 2000 Security Patch: KB830349
The following file is available for download from the Microsoft Download Center:
Download the client version of the Excel 2000 Security Patch: KB830349 package now.
Release Date: November 11, 2003
For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
After you click the link to download the patch, follow these steps:
- Click Save to save the Office2000-kb830349-client-enu.exe file to the selected folder.
- In Microsoft Windows Explorer, double-click Office2000-kb830349-client-enu.exe.
- If you are prompted to install the patch, click Yes.
- Click Yes to accept the License Agreement.
- Insert your Office 2000 CD-ROM when you are prompted to do so, and then click OK.
- When you receive a message that indicates that the installation was successful, click OK.
Note After you install the patch, you cannot remove it. To revert to an installation before the patch was installed, you must remove Office 2000, and then install it again from the original CD-ROM.
Administrative Patch
If you installed your Office 2000 product from a server location, the server administrator must update the server location with the administrative patch and deploy that update to your computer.
The following file is available for download from the Microsoft Download Center:
Download the administrative version of the Excel 2000 Security Patch: KB830349 package now.
Release Date: November 11, 2003
For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
If you are the server administrator, after you click the link to download the administrative patch follow these steps:
- Click Save to save the Office2000-kb830349-fullfile-enu.exe file to the selected folder.
- In Windows Explorer, double-click Office2000-kb830349-fullfile-enu.exe.
- If you are prompted to install the patch, click Yes.
- Click Yes to accept the License Agreement.
- In the Type the location where you want to place the extracted files box, type c:\kb830349, and then click OK.
- Click Yes when you are prompted to create the folder.
- If you are familiar with the procedure for updating your administrative installation, click Start, and then click Run.
Type the following command in the Open boxmsiexec /a
Admin Path
\MSI File
/p C:\kb830349\MSP File
SHORTFILENAMES=TRUEwhere
Note You can append /qb+ to the command line so that the Office 2000 Administrative Installation dialog box and the End User License Agreement dialog box do not appear.Admin Path
is the path of your administrative installation point for Office 2000 (for example, C:\Office2000),MSI File
is the .msi database package for the Office 2000 product (for example, Data1.msi), andMSP File
is the name of the administrative patch (for example, EXCELff.msp).
- To deploy the patch to the client workstations, click Start, and then click Run.
Type the following command in the Open boxmsiexec /i
Admin Path
\MSI File
REINSTALL=Feature List
REINSTALLMODE=vomuwhere
Admin Path
is the path of your administrative installation point for Office 2000 (for example, C:\Office2000),MSI File
is the MSI database package for the Office 2000 product (for example, Data1.msi), andFeature List
is the list of feature names (case sensitive) that have to be reinstalled for the patch. To install all features, you can use REINSTALL=ALL, or you can install the following feature:EXCELFiles
For additional information about how to update your administrative installation and deploy to client workstations, click the following article number to view the article in the Microsoft Knowledge Base:
304165 How to install an update to administrative installations
This article contains standard instructions for installing an administrative public update. You can also see the following article in the Microsoft Office Resource Kit. To do so, visit the following Microsoft Web site:
How to Determine If the Patch Is Installed
The patch contains updated versions of the following files:
File name Version ------------------------- Excel.exe 9.0.0.8216
Note For the Hindi and Thai versions of this patch, the updated file version is as follows:
File name Version ------------------------- Excel.exe 9.0.0.8902
To determine the version of Microsoft Excel that is installed on your computer, follow these steps.
Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.
- Click Start, and then click Search.
- In the Search Results pane, click All files and folders under Search Companion.
- In the All or part of the file name box, type Excel.exe, and then click Search.
- In the list of files, right-click the Excel.exe file, and then click Properties.
- On the Version tab, determine the version of Excel that is installed on your computer.
For additional information about how to determine the version of Excel that is installed on your computer, click the following article number to view the article in the Microsoft Knowledge Base:
255275 How to determine the version of your Office 2000 program
Note If the Excel 2000 Security Patch: KB830349 is already installed on your computer, you receive the following error message when you try to install the Excel 2000 Security Patch: KB830349:
Windows Installer Patch Requirements
To install the patch that is described in this article requires Windows Installer 2.0 or later. Both Microsoft Windows XP and Microsoft Windows 2000 Service Pack 3 (SP3) include Windows Installer 2.0 or later.
To install the latest version of the Windows Installer for Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition (Me), visit the following Microsoft Web site:
To install the latest version of the Windows Installer for Microsoft Windows NT 4.0 and Windows 2000, visit the following Microsoft Web site:
List of Issues That Are Fixed by the Patch
The Excel 2000 Security Patch: KB830349 fixes the issues that are described in the following Excel 2000 Post-Service Pack 3 Hotfix Packages:
822611 Excel 2000 Post-Service Pack 3 Hotfix Package: June 7, 2003
823330 Excel 2000 Post-Service Pack 3 Hotfix Package: July 8, 2003
823809 Excel 2000 Post-Service Pack 3 Hotfix Package: July 12, 2003
825812 Availability of the Excel 2000 Post-Service Pack 3 Hotfix Package: August 9, 2003
829998 Excel 2000 Post-Service Pack 3 Hotfix Package: October 13, 2003
The Excel 2000 Security Patch: KB830349 fixes the issues that are described in the following Microsoft Knowledge Base articles:
288647 Pivot table error message: cannot show or hide detail for this selection
321918 Error message when you insert an Excel object
326093 Shared workbook quits unexpectedly when you try to save
326959 File name does not appear in the recently used file list on the file menu
329804 Drop-down box reverts to the default value when you set a different drop-down box
329600 Data appears on left side of preview, or Excel stops responding when you use Print Preview or maximize workbook
810721 Signature is lost when you send a workbook that has a digitally signed project
811056 Excel stops responding (hangs) when you try to insert an object
810950 You cannot update links to workbooks that are located on a secure Web server
813120 "Automation error: The object invoked has disconnected from its clients" error message in Excel 2000
814021 Printing file from Windows Explorer causes Excel to quit unexpectedly
814672 Links in OLE Object do not automatically update when you open a file in Windows Explorer
819132 Excel stops responding when you save and close a file after publishing charts
815406 Error Message: -2147417848 Method 'Style' of Object 'Range' Failed
817469 Comments in workbook saved as Web page do not show where inserted
817578 You cannot change a link path when an Excel add-in is not loaded
818946 Run-time error message when you apply font: "'Name' Method Failed: 'Font' object
820564 Access violation occurs when you drag a Pivot Table field
820842 When you type a DBCS character in Visual Basic Editor, a full-width character is displayed
The Excel 2000 Security Patch: KB830349 fixes the following issues that were previously not documented in the Microsoft Knowledge Base:
- You receive a "Function Method Failed: PivotField" error message.
- Excel continues to run in the background after you send an e-mail message.
- The Excel document window does not appear.
- No macro security warning appears when you open a workbook that contains only Project Forms or Class Modules.
- You receive an error message in Excel 2000.
You Receive a "Function Method Failed: PivotField" Error Message
In Excel 2000, when you run a Microsoft Visual Basic for Applications (VBA) macro that creates and formats a series of Pivot Tables, you may receive the following error message:
Excel Continues to Run in the Background After You Send an E-Mail Message
If you send a workbook to a mail recipient in Excel 2000 and then quit Excel 2000, Excel 2000 may continue to run as a process in the background.
The Excel Document Window Does Not Appear
If you open a Excel 2000 workbook in Microsoft Internet Explorer, and then open and close the workbook in Excel 2000, the Excel 2000 window does not appear when you open the Excel 2000 workbook again.
No Macro Security Warning Appears When You Open a Workbook That Contains Only Project Forms or Class Modules
When you open a Excel 2000 workbook that contains a Project with Forms or Class Modules but no macro module, a macro security warning does not appear.
You Receive an Error Message in Excel 2000
You receive the following Excel 2000 error message:
When you view the data in the error report, the report contains an error signature that is similar to one of the following error signatures:
App Name App Version Module Name Module Version offset ------------------------------------------------------------------------ Excel.exe 9.0.0.4430 Mso9.dll 9.0.0.4402 000033e Excel.exe 9.0.0.6604 Winspool.drv 5.1.2600.1106 1662 Excel.exe 9.0.0.6627 Excel.exe 9.0.0.6627 36175
Additionally, other program versions, module versions, and offsets are possible.
Additional query words: security_patch security_update update security bug context flaw vulnerability malicious attacker exploit registry unauthenticated specially-formed scope specially-crafted affected
Keywords: kbservicepack kbsecurity kbinfo kbupdate KB830349