Select the product you need help with

Overview of the Microsoft Project 2000 Security Patch: September 3, 2003

Article ID: 822478 - View products that this article applies to.

SUMMARY

Microsoft has released an update to Microsoft Project 2000. This update offers the highest level of stability and security that is available for Microsoft Project 2000. This update helps prevent unauthorized code from running on your computer through any Microsoft Project documents that were specifically created to contain malicious Microsoft Visual Basic for Application (VBA) projects. This update is part of the continued effort by Microsoft to provide the latest product updates to customers.

This article describes how to download and install the Microsoft Project 2000 Security Patch: KB822478.

Back to the top | Give Feedback

MORE INFORMATION

How to download and install the update

Important Before you install this update, make sure that the following requirements have been met:

Microsoft Windows Installer 1.1

Before you install this update, you must install Windows Installer 1.1 or later. For additional information about this requirement, see the "Windows Installer Update Requirements" section of this article.
Microsoft Project 2000 Service Release 1 (SR-1)

Before you install this update, install Microsoft Project SR-1. For more information how to install Microsoft Project Service Release 1, click the following article number to view the article in the Microsoft Knowledge Base:
288953
(http://support.microsoft.com/kb/288953/ )
How to obtain and install Microsoft Project 2000 SR-1

If you installed Microsoft Project from a CD-ROM, use the Office Product Updates Web site to automatically install all the latest updates that include all available service packs and public updates.

Note Microsoft recommends that you install the client update by using the Office Product Updates Web site. The Office Product Updates Web site detects your particular installation of Microsoft Office and prompts you to install exactly what you must have to make sure that your Office installation is completely up-to-date.

To have the Office Product Updates Web site detect the required updates that you must install on your computer, visit the following Microsoft Web site:

http://office.microsoft.com/ProductUpdates/default.aspx

(http://office.microsoft.com/ProductUpdates/default.aspx)

After detection is complete, you receive a list of recommended updates for your approval. Click Start Installation to complete the process.

Note There is not a feature to remove this security update. If you anticipate the have to remove the patch, rename your existing copies of the Vbe6.dll file before you install the patch.

Administrative Update

If you installed Microsoft Project from a server location, the server administrator must update the server location with the administrative update and deploy that update to your computer.

If you are the server administrator, follow these steps to download the administrative update.

The following file is available for download from the Microsoft Download Center:

Collapse this imageExpand this image

Download the Project2000-KB822478-FullFile-ENU.exe package now.

(http://download.microsoft.com/download/0/c/f/0cf9165c-ebeb-4a3d-b2a5-0fc322d7e404/Project2000-KB822478-FullFile-ENU.exe)

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591

(http://support.microsoft.com/kb/119591/ )

How to Obtain Microsoft Support Files from Online Services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

After you click the link to download the patch, follow these steps:

In Microsoft Windows Explorer, create a new folder on the C drive, and then name the folder KB822478.
Click Save to save the Project2000-KB822478-FullFile-ENU.exe file to the KB822478 folder.
Click Start, click Run, type cmd in the Open box, and then click OK.
At the command prompt, type the following lines, and then press ENTER after each line:
```
cd\kb822478
project2000-kb822478-fullfile-enu.exe /c /t:c:\kb822478
```
Click Yes to accept the License Agreement.
At the command prompt, type the following line, and then press ENTER:
```
exit
```
Note These steps assume that you are familiar with how to update your administrative installation.Click Start, and then click Run.

Type the following command in the Open box:
msiexec /a Admin Path\MSI File /p C:\KB822478\MSP File SHORTFILENAMES=TRUE
where Admin Path is the path of your administrative installation point for Microsoft Project 2000 (for example, C:\Project), MSI File is the .msi database package for Microsoft Project 2000, and MSP File is the name of the administrative update (for example, Project2000-KB822478-FullFile.MSP).

Note You can append /qb+ to the command line so that the End User License Agreement dialog box does not appear.
To deploy the update to the client workstations, click Start, and then click Run.

Type the following command in the Open box:
msiexec /i Admin Path\MSI File REINSTALL=Feature List REINSTALLMODE=vomu
where Admin Path is the path of your administrative installation point for Microsoft Project 2000 (for example, C:\Project), MSI File is the MSI database package for Project 2000, and Feature List is the list of feature names (case sensitive) that have to be reinstalled for the update. To install all features, you can use REINSTALL=ALL or you can use the following feature:
- ProductNonBootFiles

How to determine whether the update is installed

The update contains an updated version of the following file:

   File name      Version
   -----------------------
   Vbe6.dll       6.4.99.69

To determine the version of the Vbe6.dll file that is installed on your computer, follow these steps.

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.

Click Start, and then click Search.
In the Search Results pane, click All files and folders under Search Companion.
In the All or part of the file name box, type VBE6.dll, and then click Search.
In the list of files, right-click VBE6.dll, and then click Properties.
On the Version tab, determine the version of the Vbe6.dll file that is installed on your computer.

Note If the Microsoft Project 2000 Security Patch: KB822478 is already installed on your computer, you receive the following error message when you try to install the Microsoft Project 2000 Security Patch: KB822478:

This update has already been applied or is included in an update that has already been applied.

Windows Installer update requirements

To install the update that is described in this article requires Windows Installer 1.1 or later. Both Microsoft Windows XP and Microsoft Windows 2000 include the appropriate version of Windows Installer. To install the latest version of the Windows Installer, visit one of the following Microsoft Web sites.

Windows Installer for Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition (Me):

http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-b702-de3bb768148f%20&displaylang=en

(http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-b702-de3bb768148f%20&displaylang=en)

Windows Installer for Microsoft Windows NT 4.0 and Windows 2000:

http://www.microsoft.com/downloads/details.aspx?familyid=4B6140F9-2D36-4977-8FA1-6F8A0F5DCA8F

(http://www.microsoft.com/downloads/details.aspx?familyid=4B6140F9-2D36-4977-8FA1-6F8A0F5DCA8F)

List of issues fixed by the update

The Microsoft Project 2000 Security Patch: KB822478 fixes the following issue that was previously not documented in the Microsoft Knowledge Base:

Microsoft Project Documents That Contain Malicious VBA Projects May RunCode on Your Computer
Microsoft Project documents that were specifically created to contain malicious VBA projects may run code on your computer.

Back to the top | Give Feedback