Article ID: 240770 - Last Review: January 25, 2007 - Revision: 2.3

OFF: Frequently Asked Questions About the ODBC Driver Security Vulnerability Update

View products that this article applies to.
This article was previously published under Q240770

On This Page

Expand all | Collapse all

SUMMARY

This article addresses some of the most frequently asked questions about the Open Database Connectivity (ODBC) Driver Security Vulnerability Update.

For additional information about this update, click the following article numbers to view the articles in the Microsoft Knowledge Base:
240159  (http://support.microsoft.com/kb/240159/ ) OFF2000: Office 2000 ODBC Driver Vulnerability Security Update
238445  (http://support.microsoft.com/kb/238445/EN-US/ ) OFF97: Office 97 ODBC Driver Vulnerability Security Update
Note It is not necessary to install this patch on Microsoft Windows 2000.
Back to the top

MORE INFORMATION

How Do I Apply This Update to My Computer?

For additional information about how to apply this update to your computer, click the following article number to view the article in the Microsoft Knowledge Base:
240159  (http://support.microsoft.com/kb/240159/ ) OFF2000: Office 2000 ODBC Driver Vulnerability Security Update
Back to the top

Can I Update My Administrative Installation Point for Office to Include This Update When I Perform Client Installations?

For additional information about how to update your administrative installation of Office 2000 with the ODBC Driver Vulnerability Security Update, click the following article number to view the article in the Microsoft Knowledge Base:
243400  (http://support.microsoft.com/kb/243400/ ) OFF2000: How to Update an Administrative Installation with the ODBC Vulnerability Patch
For additional information about how to update your administrative installation of Office 97 with the ODBC Driver Vulnerability Security Update, click the following article number to view the article in the Microsoft Knowledge Base:
243689  (http://support.microsoft.com/kb/243689/ ) OFF97: How to Update an Administrative Installation with the ODBC Vulnerability Patch
Back to the top

Which Files and Registry Entries Are Modified by the Update?

Files

The following Microsoft Knowledge Base articles contain a list of the files the ODBC Security Update replaces:
239114  (http://support.microsoft.com/kb/239114/ ) ACC2000: Updated Version of Microsoft Jet 4.0 Available on MSL
172733  (http://support.microsoft.com/kb/172733/ ) Updated Version of Microsoft Jet 3.5 Available on MSL
Note The files that are listed in these articles are installed only if an earlier version of the file is present on your computer.

Registry Entries

The update sets the SandboxMode registry entries in the following subkeys to a value of 2:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Jet\4.0\Engines

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Jet\3.5\Engines
The update sets the DisabledExtensions registry entries in the following subkeys to a value of
!txt,csv,tab,asc,htm,html :
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Jet\4.0\Engines\Text

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Jet\3.5\Engines\Text
For additional information about the registry entries that are listed earlier, click the following article numbers to view the articles in the Microsoft Knowledge Base:
239471  (http://support.microsoft.com/kb/239471/ ) Jet 4.0 Text IISAM Allows User to Append Lines to System Files
239105  (http://support.microsoft.com/kb/239105/ ) Jet 3.5 Text ISAM Allows User to Append Lines to System Files
239482  (http://support.microsoft.com/kb/239482/ ) ACC2000: Jet 4.0 Expression Can Execute Unsafe Visual Basic for Applications Functions
239104  (http://support.microsoft.com/kb/239104/ ) Jet Expression Can Execute Unsafe Visual Basic for Applications Functions
Back to the top

How Do I Know If the Update Has Been Installed Correctly?

   If you have this file...  The version number should be...
   ---------------------------------------------------------
 
   MSJET35.DLL               3.51.3203.0 
   MSJET40.DLL               4.00.2927.4
Back to the top

I Have Just Used Office Setup to Add More Features to My Office Installation. Do I Need to Reapply This Update?

Yes. In fact, any time that you install a program that installs components of the Microsoft Jet database engine, you may need to reapply this update.
Back to the top

I Am Running Office 97. Do I Need to Install Service Release 2 (SR-2) Before I Install This Update?

SR-2 is not required in order to install this update. However, Microsoft strongly recommends that you upgrade to SR-2 before you install this update. If you do not install SR-2 before installing this update, some Jet 3.5 components may not be updated correctly. This may result in damage to your database products or may result in data corruption.
Back to the top

How Can I Roll Out the Update to My Users in Quiet Mode?

Use the following syntax on the command line that you use to install the update
path\JetCopkg.exe /q
where path is the path to the JetCopkg.exe file.
Back to the top

What Command-Line Switches Can I Use When I Install the Update?

The following table lists the command-line switches that you can use with this update.

Note The following switches apply to the JetCoUpd.exe file, which is contained within the JetCopkg.exe file. For example, if you want to deploy this update in quiet mode while setting the Jet's Sandbox Mode to a value of 3, then your command line would be the following
path\JetCopkg.exe /q /c:"jetcoupd.exe /q /m:3"
where path is the path to the Jetcopkg.exe file. 
   Switch   Description
   -----------------------------------------------------------------------

   /q       Quiet Mode
 
   /s       Silent Mode (same as Quiet Mode)
  
   /d       Disables the "Confirm Open After Download" flag for the  
            following Office file types:

               MS_ClipArt_Gallery.2
               Excel.Chart.5
               Excel.Chart.8
               Excel.Sheet.5
               Excel.Sheet.8
               iqyfile
               rqyfile
               Outlook.Template
               msgfile
               vcsfile
               vcffile
               icsfile
               PowerPoint.Slide.8
               PowerPoint.Show.8
               PowerPoint.SlideShow.8
               PowerPoint.Template.8
               Word.Template.8
               Word.Wizard.8
               Word.Backup.8
               Word.Document.8
               Word.RTF.8
               

   /m:<n>   Sets the Jet Sandbox Mode. <n> can be set to 0, 1, 2, or 3.
Back to the top

I Have Developed Custom Applications That Use Microsoft Access Run Time (ART). How Does This Update Affect My ART Applications?

For ART solutions that are already installed onto your client's computer, you need to apply the patch at your client's computer.

To update the installation routine for your ART solution, use the appropriate method for your version of Access:
  • Access 97: Install the patch onto your development computer and then repackage your solution using the Setup wizard.
  • Access 2000: Using the Package and Deployment Wizard, add the Jet40sp3.exe file to your package and set the options to run that file at the end of the regular install.
Back to the top

REFERENCES

For additional information about this problem, click the following article numbers to view the articles in the Microsoft Knowledge Base:
239471  (http://support.microsoft.com/kb/239471/ ) Jet 4.0 Text IISAM Allows User to Append Lines to System Files
239482  (http://support.microsoft.com/kb/239482/ ) ACC2000: Jet 4.0 Expression Can Execute Unsafe Visual Basic for Applications Functions
239104  (http://support.microsoft.com/kb/239104/ ) Jet Expression Can Execute Unsafe Visual Basic for Applications Functions
239105  (http://support.microsoft.com/kb/239105/ ) Jet 3.5 Text ISAM Allows User to Append Lines to System Files
Back to the top
APPLIES TO
  • Microsoft Office 2000 Premium Edition
  • Microsoft Office 2000 Professional Edition
  • Microsoft Office 2000 Small Business Edition
  • Microsoft Office 2000 Standard Edition
  • Microsoft Office 2000 Developer Edition
  • Microsoft Office 97 Standard Edition
Back to the top
Keywords: 
kbhowto KB240770
Back to the top
 

Get Help Now

Contact a support professional by E-mail, Online, or Phone

Article Translations