Knowledge Base

Description of the Excel 2002 security patch: November 11, 2003

Article ID: 830350

Article Last Modified on 1/9/2007

APPLIES TO

Microsoft Excel 2002 Standard Edition

SUMMARY

Microsoft has released a patch to Microsoft Excel 2002. This patch fixes a vulnerability under certain scenarios where an Excel 2002 file can be modified in such a way that a macro that includes Microsoft Excel 4.0 Macro Language (XLM) commands could run with no macro security warning issued. Additionally, many other issues are fixed as described later in this article. This Excel 2002 patch is part of the continued effort by Microsoft to provide the latest product updates to customers.

This article describes how to download and install the Microsoft Excel 2002 Security Patch: KB830350.

This security patch was first included in Office XP Service Pack 3. For additional information about the latest service pack for Office XP, click the following article number to view the article in the Microsoft Knowledge Base:

307841 How to obtain the latest Office XP service pack

MORE INFORMATION

How to Download and Install the Patch

Important Before you install this patch, make sure that the following requirements have been met:

Microsoft Windows Installer 2.0
Before you install this patch, you must install Windows Installer 2.0 or later. For additional information about this requirement, see the "Windows Installer Patch Requirements" section of this article.
Microsoft Office XP Service Pack 2 (SP-2)
Before you install this patch, install Office XP SP-2.

For additional information about how to install Office XP Service Pack 2, click the following article number to view the article in the Microsoft Knowledge Base:

325671 OFFXP: Overview of the Office XP Service Pack 2

Client Patch

If you installed Excel 2002 from a CD-ROM, you have the following two options:

Use the Microsoft Office Product Updates Web site to automatically install all the latest updates that include all available service packs and public updates.
Install only the Excel 2002 Security Patch: KB830350 by following the steps that are described later in this article.

Note Microsoft recommends that you install the client patch by using the Office Product Updates Web site. The Office Product Updates Web site detects your particular installation of Microsoft Office and prompts you to install exactly what you must have to make sure that your Office installation is completely up-to-date.

Office Product Updates Web Site

To have the Office Product Updates Web site detect the required updates that you must install on your computer, visit the following Microsoft Web site:

http://office.microsoft.com/en-us/downloads/maincatalog.aspx

After detection is complete, you receive a list of recommended updates for your approval. Click Start Installation to complete the process.

Install Only the Excel 2002 Security Patch: KB830350

The following file is available for download from the Microsoft Download Center:

Download the client version of the Excel 2002 Security Patch: KB830350 package now.

Release Date: November 11, 2003

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

After you click the link to download the patch, follow these steps:

Click Save to save the Officexp-kb830350-client-enu.exe file to the selected folder.
In Microsoft Windows Explorer, double-click Officexp-kb830350-client-enu.exe.
If you are prompted to install the patch, click Yes.
Click Yes to accept the License Agreement.
Insert your Office XP CD-ROM when you are prompted to do so, and then click OK.
When you receive a message that indicates that the installation was successful, click OK.

Note After you install the patch, you cannot remove it. To revert to an installation before the patch was installed, you must remove Office XP, and then install it again from the original CD-ROM.

Administrative Patch

If you installed your Office XP product from a server location, the server administrator must update the server location with the administrative patch and deploy that update to your computer.

The following file is available for download from the Microsoft Download Center:

Download the administrative version of the Excel 2002 Security Patch: KB830350 package now.

Release Date: November 11, 2003

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

If you are the server administrator, after you click the link to download the administrative patch follow these steps:

Click Save to save the Officexp-kb830350-fullfile-enu.exe file to the selected folder.
In Windows Explorer, double-click Officexp-kb830350-fullfile-enu.exe.
If you are prompted to install the patch, click Yes.
Click Yes to accept the License Agreement.
In the Type the location where you want to place the extracted files box, type c:\KB830350, and then click OK.
Click Yes when you are prompted to create the folder.
If you are familiar with the procedure for updating your administrative installation, click Start, and then click Run.

Type the following command in the Open box

msiexec /a Admin Path\MSI File /p C:\KB830350\MSP File SHORTFILENAMES=TRUE

where Admin Path is the path of your administrative installation point for Office XP (for example, C:\OfficeXP), MSI File is the .msi database package for the Office XP product (for example, Proplus.msi), and MSP File is the name of the administrative patch (for example, EXCELff.msp).

Note You can append /qb+ to the command line so that the Office XP Administrative Installation dialog box and the End User License Agreement dialog box do not appear.
To deploy the patch to the client workstations, click Start, and then click Run.

Type the following command in the Open box

msiexec /i Admin Path\MSI File REINSTALL=Feature List REINSTALLMODE=vomu

where Admin Path is the path of your administrative installation point for Office XP (for example, C:\OfficeXP), MSI File is the MSI database package for the Office XP product (for example, Proplus.msi), and Feature List is the list of feature names (case sensitive) that have to be reinstalled for the patch. To install all features, you can use REINSTALL=ALL, or you can install the features that are listed in the following table.

Office products	Feature names
Microsoft Office XP (all versions)	EXCELFiles,WORDNonBootFiles
Excel 2002	EXCELFiles

For additional information about how to update your administrative installation and deploy to client workstations, click the following article number to view the article in the Microsoft Knowledge Base:

301348 HOW TO: Install a Public Update to Administrative Installations of Office XP

This article contains standard instructions for installing an administrative public update. You can also see the following article in the Microsoft Office Resource Kit. To do so, visit the following Microsoft Web site:

http://www.microsoft.com/office/ork/2003/admin/xp/exc1004a.htm

How to Determine If the Patch Is Installed

The patch contains updated versions of the following files:

   File name      Version
   --------------------------
   Excel.exe      10.0.5815.0

To determine the version of Microsoft Excel that is installed on your computer, follow these steps.

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.

Click Start, and then click Search.
In the Search Results pane, click All files and folders under Search Companion.
In the All or part of the file name box, type Excel.exe, and then click Search.
In the list of files, right-click the Excel.exe file, and then click Properties.
On the Version tab, determine the version of Excel that is installed on your computer.

For additional information about how to determine the version of Excel that is installed on your computer, click the following article number to view the article in the Microsoft Knowledge Base:

291331 How to check the version of Office XP

Note If the Excel 2002 Security Patch: KB830350 is already installed on your computer, you receive the following error message when you try to install the Excel 2002 Security Patch: KB830350:

This update has already been applied or is included in an update that has already been applied.

Windows Installer Patch Requirements

To install the patch that is described in this article requires Windows Installer 2.0 or later. Both Microsoft Windows XP and Microsoft Windows 2000 Service Pack 3 (SP3) include Windows Installer 2.0 or later.

To install the latest version of the Windows Installer for Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition (Me), visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-b702-de3bb768148f%20&displaylang=en

To install the latest version of the Windows Installer for Microsoft Windows NT 4.0 and Windows 2000, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=4b6140f9-2d36-4977-8fa1-6f8a0f5dca8f&DisplayLang=en

List of Issues That Are Fixed by the Patch

The Excel 2002 Security Patch: KB830350 fixes the issues that are described in the following Excel 2002 Post-Service Pack 2 Hotfix Packages:

822347 Excel 2002 Post-Service Pack 2 Hotfix Package: June 7, 2003

823338 Excel 2002 Post-Service Pack 2 Hotfix Package: July 11, 2003

823969 Excel 2002 Post-Service Pack 2 Hotfix Package: August 10, 2003

827134 Excel 2002 Post-Service Pack 2 Hotfix Package: August 22, 2003

827143 Excel 2002 Post-Service Pack 2 Hotfix Package: August 28, 2003

827978 Excel 2002 Post-Service Pack 2 Hotfix Package: September 19, 2003

827984 Excel 2002 Post-Service Pack 2 Hotfix Package: September 25, 2003

829340 Excel 2002 Post-Service Pack 2 hotfix package: October 6, 2003

The Excel 2002 Security Patch: KB830350 fixes the issues that are described in the following Microsoft Knowledge Base articles:

325207 XL2002: Edits to PivotTables Do Not Bring Back New Columns

330157 XL2002: Excel Quits When You Click an ActiveX Control

324491 You receive "The file may have been changed..." error message when you save a workbook to a network server in Excel 2002 or in Excel 2003

330345 Excel 2002: Custom Toolbars Are Lost After You Quit Excel

331401 XL2002: Excel May Stop Responding If You Call Calculate from an Asynchronous COM Event

811207 Cannot see data that you copy from Excel 2002 in FrontPage 2002 preview

811344 XL2002: An Additional "Object" Workbook Opens and Excel Appears to Stop Responding

811157 XL2002: Excel Appears to Stop Responding When You Remove Subtotals

811161 Data Labels Disappear If Value Is Greater Than Axis Maximum

327365 XL2002: Workbook Is Slow to Open

812384 XL2002: "Unable to Read File" Error Message When You Open a Workbook

812647 XL2002: Links in OLE Object Do Not Automatically Update When You Open a File in Windows Explorer

812668 XL2002: Excel Appears to Stop Responding While Converting Text to Columns in Earlier Version Worksheet

814020 XL2002: Excel Data Changes Font Format After You Edit the Excel Data in Word

815196 OFFXP: Labels in Pasted Excel Chart Object Are Distorted, Unreadable, or Incomplete

821272 OFFXP: Preventing Office XP from Creating New Org Charts in Office XP Format

816997 XL2002: Time Calculation in Pivot Table May Not Be Accurate

820432 XL2002: Comments Appear in the Wrong Place in Workbook Saved As Web Page

819853 XL2002: "Unable to Read File" Error Message When You Open Excel File That Contains a PivotTable Report

821136 XL2002: DDE Clients Cannot Use a RUN Command to Run an Inline Macro After a Security Update

821292 XL2002: Error Message: Run-Time Error:'13' Type Mismatch

821078 XL2002: Excel Quits When You Draw a Connector Line on a Chart

821564 XL2002: Date Formats Are Lost When You Programmatically Move Data from One Range to Another

821273 XL2002: Workbook Does Not Print When You Use Excel on a Tablet PC

823026 "Unable To Read File" Error Message When You Open a Workbook and Try to Update Links

831959 XL2002: You Receive a "Cannot Open Protected File" Error Message When You Open a Tab-Delimited Text File

The Excel 2002 Security Patch: KB830350 fixes the following issues that were previously not documented in the Microsoft Knowledge Base:

You cannot access an FTP Web aite when you Auto Republish a file.
Data is missing in a password-protected file.
Excel quits unexpectedly when you click Print Preview.
Excel stops responding when you edit a long formula.
Excel cannot complete the task when you use Track Changes.
Combo box values revert to the default value.
You cannot update links to files on a secure Web server.
You receive macro error messages when you set properties on a Pivot Table.
You receive an "Unexpected Error" error message in Web browser with Basic Authentication.
Excel quits unexpectedly when you run a macro to insert page breaks.
Drawing objects are moved or resized when you save a workbook.
Incorrect file origin is listed when you open a text file.
Error message "Unable to derive parameter information..." when you query an SQL server.
Excel quits unexpectedly when an OLAP cube contains Null values.
Shared workbook quit unexpectedly when you try to save.
You receive an error message in Excel 2002.

You Cannot Access an FTP Web Site When You Auto Republish a File

When you save changes to a published Web site in Excel 2002, you may receive the following error message:

The operation to Auto Republish items to web pages generated warnings or errors.

Cannot Access ftp site address when Auto Republishing a file.

Data Is Missing in a Password-Protected File

When you open your password-protected Excel file, all the data in the file is missing.

Excel Quits Unexpectedly When You Click Print Preview

In Excel 2002, if you open a XML spreadsheet from an Office XP Spreadsheet Web Component, when you click Print Preview on the File menu, Excel may unexpectedly quit.

Excel Stops Responding When You Edit a Long Formula

In Excel 2002, when you try to edit a long formula in a cell that contains a link, Excel may stop responding (hang).

Excel Cannot Complete the Task When You Use Track Changes

When you use Track Changes and select the option to highlight changes on a new worksheet, you may receive the following error message:

Excel cannot complete the task with available resources. Choose less data or close other applications.

Combo Box Values Revert to the Default Value

If an Excel 2002 worksheet contains two or more ActiveX combo boxes, and you change the value of the first combo box, and then make a change to another combo box, the first box may revert to its default value.

You Cannot Update Links to Files on a Secure Web Server

You cannot update links in a Microsoft Excel workbook that is located on a secure Web server that uses Web Folders. For example, you may experience one of the following behaviors:

When you click Links on the Edit menu to update the links automatically, you may receive an error message that is similar to the following:

Source file not found.
When you open the workbook to update the links automatically, the links are not updated to the most current values. A #REF! error may appear in the cells.

You Receive Macro Error Messages When You Set Properties on a Pivot Table

In Excel 2002, when you run a macro code that has been converted from an earlier version of Excel, you may receive the following error messages when the macro is setting the properties of a Pivot Table:

-2147417848 Method 'Style' of object 'Range' failed

Unable to get the TableRange2 property of the PivotTable Class

You Receive an "Unexpected Error" Error Message in Web Browser with Basic Authentication

When you update a link from one Excel sheet to another Excel sheet, you may receive an "Unexpected error" error message if the files are located on an IIS Server with Basic Authentication and are opened in Microsoft Internet Explorer.

Excel Quits Unexpectedly When You Run a Macro to Insert Page Breaks

When you run a Microsoft Visual Basic for Applications (VBA) macro to insert page breaks in your Excel worksheet, Excel may quit unexpectedly after you receive the following error message:

Run-time error '-2147417848 (80010108)':

Automation error
The object invoked has disconnected from its clients.

Drawing Objects Are Moved or Resized When You Save a Workbook

When you save a workbook while a different workbook is the active workbook, drawing objects that are placed on a chart may move or may be resized.

Incorrect File Origin Is Listed When You Open a Text File

When you open a text file (*.txt) in Excel 2002, the Text Import Wizard may list an incorrect file origin (for example: Chinese Simplified, Japanese, or Cyrillic).

Error Message "Unable to Derive Parameter Information... " When You Query an SQL Server

In Excel 2002, when you query a Microsoft Windows 2000 SQL server, you may receive the following error messages:

[Microsoft][ODBC SQL Server Driver]Unable to derive parameter information when parameter marker is a function argument

When you click OK, you receive the following error message:

[Microsoft][ODBC SQL Server Driver]Invalid descriptor index

Excel Quits Unexpectedly When an OLAP Cube Contains Null Values

If you save and close a Excel 2002 file that contains a Null values dimension from an OLAP cube in the page field of a Pivot Chart, when you reopen your workbook, Excel may quit unexpectedly.

Shared Workbook Quit Unexpectedly When You Try to Save

When you open or save a shared Excel 2002 workbook, Excel may quit unexpectedly, and you may receive the following error message:

Excel has generated errors and will be shutdown

You Receive an Error Message in Excel 2002

You receive the following Excel 2002 error message:

Microsoft Excel has encountered a problem and needs to close. We are sorry for the inconvenience.

To see what data this error report contains, click here.

When you view the data in the error report, the report contains an error signature that is similar to one of the following error signatures:

App Name        App Version     Module Name     Module Version  offset
------------------------------------------------------------------------
Excel.exe       10.0.3708.0     Fm20.dll        2.1.7017.1      0000f2e2
Excel.exe       10.0.4302.0     Excel.exe       10.0.4302.0     70898
Excel.exe       10.0.4302.0     Excel.exe       10.0.4302.0     00149a67
Excel.exe       10.0.3506.0     Mso.dll         10.0.3501.0     0001518e
Excel.exe       10.0.5018.0     Excel.exe       10.0.5018.0     1.82E+04
Excel.exe       10.0.5018.0     Excel.exe       10.0.5018.0     18200
Excel.exe       10.0.4524.0     Excel.exe       10.0.4524.0     18245
Excel.exe       10.0.4524.0     Excel.exe       10.0.4524.0     0001823f
Excel.exe       10.0.4302.0     Excel.exe       10.0.4302.0     0001828a
Excel.exe       10.0.3506.0     Excel.exe       10.0.3506.0     18030
Excel.exe       10.0.3207.0     Excel.exe       10.0.3207.0     000181d0
Excel.exe       10.0.2614.0     Excel.exe       10.0.2614.0     18118
Excel.exe       10.0.2614.0     Excel.exe       10.0.2614.0     001c50df
Excel.exe       10.0.2614.0     Excel.exe       10.0.2614.0     18127
Excel.exe       10.0.2614.0     Excel.exe       10.0.2614.0     0001811c
Excel.exe       10.0.4109.0     Excel.exe       10.0.4109.0     00024d90
Excel.exe       10.0.5508.0     Excel.exe       10.0.5508.0     00448F45
Excel.exe       10.0.4721.0     Excel.exe       10.0.4721.0     449134
Excel.exe       10.0.4721.0     Excel.exe       10.0.4721.0     449131
Excel.exe       10.0.4721.0     Excel.exe       10.0.4721.0     0044912e
Excel.exe       10.0.4524.0     Excel.exe       10.0.4524.0     00448b01
Excel.exe       10.0.4524.0     Excel.exe       10.0.4524.0     00448afb
Excel.exe       10.0.4524.0     Excel.exe       10.0.4524.0     00448afe
Excel.exe       10.0.4302.0     Excel.exe       10.0.4302.0     00448a70
Excel.exe       10.0.4302.0     Excel.exe       10.0.4302.0     00448a6d
Excel.exe       10.0.4302.0     Excel.exe       10.0.4302.0     00448a6a
Excel.exe       10.0.4109.0     Excel.exe       10.0.4109.0     448147
Excel.exe       10.0.4109.0     Excel.exe       10.0.4109.0     0044814d
Excel.exe       10.0.3506.0     Excel.exe       10.0.3506.0     004460a4
Excel.exe       10.0.3506.0     Excel.exe       10.0.3506.0     0044609e
Excel.exe       10.0.3506.0     Excel.exe       10.0.3506.0     004460a1
Excel.exe       10.0.3207.0     Excel.exe       10.0.3207.0     0044795c

Additionally, other program versions, module versions, and offsets are possible.

Additional query words: security_patch security_update update security bug context flaw vulnerability malicious attacker exploit registry unauthenticated specially-formed scope specially-crafted affected

Keywords: atdownload kbservicepack kbsecurity kbinfo kbupdate KB830350

Microsoft KB Archive/830350

Contents