Select the product you need help with

Overview of the Access 2000 Runtime Security Patch: September 3, 2003

Article ID: 827431 - View products that this article applies to.

For a Microsoft Access 2002 version of this article, see 827430

(http://support.microsoft.com/kb/827430/ )

SUMMARY

Microsoft has released an update to Microsoft Access Runtime 2000. This update fixes a problem where Microsoft Office 2000 documents that are specifically crafted to contain malicious Microsoft Visual Basic for Applications (VBA) projects may run unauthorized code on your computer. This Access 2000 Runtime update is part of the continued effort by Microsoft to provide the latest product updates to customers.

This article describes how to download and to install the Access 2000 Runtime Security Patch: KB827431.

Back to the top | Give Feedback

MORE INFORMATION

How to Download and Install the Update

Important Before you install this update, make sure that your system meets the following requirements:

Microsoft Windows Installer 2.0

Before you install this update, you must install Windows Installer 2.0 or later. For more information about this requirement, see the "Windows Installer Update Requirements" section of this article.
Office 2000 Service Pack 3 (SP-3)

Before you install this update, install Office 2000 SP-3.

For additional information about how to install Office 2000 Service Pack 3, click the following article number to view the article in the Microsoft Knowledge Base:
326585
(http://support.microsoft.com/kb/326585/ )
OFF2000: Overview of Office 2000 Service Pack 3

Office Product Updates Web Site

To have the Office Product Updates Web site detect the required updates that you must install on your computer, visit the following Microsoft Web site:

http://office.microsoft.com/ProductUpdates/default.aspx

(http://office.microsoft.com/ProductUpdates/default.aspx)

After detection is complete, you receive a list of recommended updates for your approval. Click Start Installation to complete the process.

Steps for Developers for Updating Existing Run-time Programs

You can use either of the following two options:

Direct Users to the Microsoft Office Product Updates Web site
Distribute the Access 2000 Runtime Security Patch: KB827431

Direct Users to the Microsoft Office Product Updates Web Site

One option for updating computers is to have each user visit the Microsoft Office Products Updates Web site and download the update. Microsoft recommends that you install the client update. To do so, visit the Office Product Updates Web site. The Office Product Updates Web site detects your particular installation of Access Runtime and other Microsoft Office components and then prompts you to install exactly what you must have to make sure that your Access Runtime installation is completely up-to-date. To use this option, have each user follow these steps.

Note After you install the update, you cannot remove it. To revert to an installation before the update was installed, you must remove the Access run-time program and then install it again from the original source. Remember to back up any data files before you remove the Access run-time program.

Visit the Microsoft Office Products Updates Web site:
http://office.microsoft.com/ProductUpdates/default.aspx
(http://office.microsoft.com/ProductUpdates/default.aspx)
Click Check for Updates.
Click Access 2000 Runtime Security Patch: KB827431, and then click Start Installation.
Click to select the I accept the terms of the license agreement check box, and then click Next.
Click Next two times.
Click Finish.

Distribute the Access 2000 Runtime Security Patch: KB827431

Another option for updating computers is to download and distribute the client update or the full-file update to users.

Note After you install the update, you cannot remove it. To revert to an installation before the update was installed, you must remove the Access run-time program and then install it again from the original source. Remember to back up any data files before you remove the Access run-time program.

To download and distribute the client update to users, follow these steps:

Download the client version of the Access 2000 Runtime Security Patch: KB827431.

Collapse this imageExpand this image
Download the office2000-kb827431-client-enu.exe package now.
(http://download.microsoft.com/download/6/3/d/63d5d139-818f-49db-9fab-12ad0a393c59/office2000-kb827431-client-enu.exe)

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591
(http://support.microsoft.com/kb/119591/ )
How to Obtain Microsoft Support Files from Online Services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
Distribute the file office2000-kb827431-client-enu.exe to the users.
Have the users open Microsoft Windows Explorer, double-click office2000-kb827431-client-enu.exe, and then follow the steps to install.

Note Applying full-file updates directly to client computers is an efficient way to make sure that all users have the most current version of the software when you do not know the updates that users have applied. Additionally, users can apply a full-file patch even if they do not have access to the installation source.

To download and distribute the full-file update to users, follow these steps:

Download the full-file version of the Access 2000 Runtime Security Patch: KB827431.

Collapse this imageExpand this image
Download the office2000-kb827431-fullfile-enu.exe package now.
(http://download.microsoft.com/download/6/3/d/63d5d139-818f-49db-9fab-12ad0a393c59/office2000-kb827431-fullfile-enu.exe)

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591
(http://support.microsoft.com/kb/119591/ )
How to Obtain Microsoft Support Files from Online Services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
Distribute the file office2000-kb827431-fullfile-enu.exe to the users.
Have the users open Microsoft Windows Explorer, double-click office2000-kb827431-fullfile-enu.exe, and then follow the steps to install.

For more information about this installation strategy and a comparison of the different update options, visit the following Microsoft Web site:

http://office.microsoft.com/en-us/orkXP/HA011525711033.aspx

(http://office.microsoft.com/en-us/orkXP/HA011525711033.aspx)

How to Determine if the Update Is Installed

The update contains updated versions of the following files:

   File name      Version
   --------------------------
   Vbe6.dll       6.4.99.69
   Snapview.exe   10.0.4622.0
   Snapview.ocx   10.0.5529.0

To determine if the update is installed on your computer, follow these steps.

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.

Click Start, and then click Search.
In the Search Results pane under Search Companion, click All files and folders.
In the All or part of the file name box, type Snapview.exe, and then click Search.
In the list of files, right-click Snapview.exe, and then click Properties.
On the Version tab, if the version number is 10.0.4622.0 the update is installed on your computer.

Note If the Access 2000 Runtime Security Patch: KB827431 is already installed on your computer, you receive the following error message when you try to install the Access 2000 Runtime Security Patch: KB827431:

This update has already been applied or is included in an update that has already been applied.

Windows Installer Update Requirements

To install the update that is described in this article, you must have Windows Installer 2.0 or later. Both Microsoft Windows XP and Microsoft Windows 2000 Service Pack 3 (SP3) include Windows Installer 2.0 or later.

For additional information about how to install the latest version of Windows Installer for Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition (Me), visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-b702-de3bb768148f%20&displaylang=en

(http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-b702-de3bb768148f%20&displaylang=en)

For additional information about how to install the latest version of Windows Installer for Microsoft Windows NT 4.0 and Windows 2000, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=4b6140f9-2d36-4977-8fa1-6f8a0f5dca8f&DisplayLang=en

(http://www.microsoft.com/downloads/details.aspx?FamilyID=4b6140f9-2d36-4977-8fa1-6f8a0f5dca8f&DisplayLang=en)

List of Issues That Are Fixed by the Update

The Access 2000 Runtime Security Patch: KB827431 fixes the following issues that were previously not documented in the Microsoft Knowledge Base.

Office Documents That Contain Malicious VBA Projects May Run Unauthorized Code

Microsoft Office 2000 documents that are specifically crafted to contain malicious VBA projects may run unauthorized code on your computer.

Non-linked SnapShot Object May Appear With Desktop Color

When you insert a SnapShot object (.snp file) without linking the object to a document, you may not see the object. The SnapShot object may appear with the same color as the desktop.