Description of the Outlook 2002 Security Patch: March 9, 2004

Article translations Article translations
Article ID: 828040 - View products that this article applies to.
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all

On This Page

SUMMARY

Microsoft has released an update to Microsoft Outlook 2002. This update offers the highest levels of stability and security for Outlook 2002. The update also addresses a flaw that could enable an attacker to bypass the blocking capabilities of Microsoft Outlook command-line parameters. The appropriate warning dialog boxes will appear. This update is part of Microsoft’s continued effort to provide the latest product updates to customers.

This article describes how to download and install the Outlook 2002 Security Patch: KB828040.

Note Microsoft Office XP Service Pack 3 includes all the fixes that are found in the Outlook 2002 Security Patch: KB828040.

For additional information about how to install Office XP Service Pack 3, click the following article number to view the article in the Microsoft Knowledge Base:
832671 Overview of Microsoft Office XP Service Pack 3

MORE INFORMATION

How to download and install the administrative version of the Outlook 2002 Security Patch: KB828040

Important Before you install this update, make sure that the following requirements have been met:
  • Microsoft Windows Installer 2.0

    Before you install this update, you must install Windows Installer 2.0 or later. For additional information about this requirement, see the "Windows Installer update requirements" section of this article.
  • Microsoft Office XP Service Pack 2

    Before you install this update, install Office XP Service Pack 2.

    For additional information about how to install Office XP Service Pack 2, click the following article number to view the article in the Microsoft Knowledge Base:
    325671 OFFXP: Overview of the Office XP Service Pack 2
    Note The full-file Outlook 2002 Security Patch: KB828040 installs successfully on Office XP Service Pack 1 or Office XP Service Pack 2 installations.
The following file is available for download from the Microsoft Download Center:
Collapse this imageExpand this image
Download
Download the English version of the Outlook 2002 Security Patch: KB828040 package now.
For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to Obtain Microsoft Support Files from Online Services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.
Note To obtain a localized version of the Outlook 2002 Security Patch: KB828040 package, visit the following Microsoft Web site:
http://www.microsoft.com/office/ork/2003/admin/xp/olk1007a.htm
If you are the server administrator, follow these steps to update the server location with the administrative update and deploy the update:
  1. Click Save to save the Officexp-kb828040-fullfile-enu.exe file to the selected folder.
  2. In Microsoft Windows Explorer, double-click officexp-kb828040-fullfile-enu.exe.
  3. Click Yes to accept the License Agreement.
  4. In the Type the location where you want to place the extracted files box, type c:\828040, and then click OK.
  5. Click Yes when you are prompted to create the folder.
  6. If you are familiar with the procedure for updating your administrative installation, click Start, and then click Run. Type the following command in the Open box where Admin Path is the path of your administrative installation point for Microsoft Office XP (for example, C:\OfficeXP), MSI File is the .msi database package for the Office XP product (for example, ProPlus.msi), and MSP File is the name of the administrative update (for example, OUTLOOKff.msp):
    msiexec /a AdminPath\MSI File /p C:\828040\MSP File SHORTFILENAMES=TRUE
    Note You can append /qb+ to the command line so that the Office XP AdministrativeInstallation dialog box and the End User LicenseAgreement dialog box do not appear.
  7. To deploy the update to the client workstations, click Start, and then click Run. Type the following command in the Open box where Admin Path is the path of your administrative installation point for Office XP (for example, C:\OfficeXP), MSI File is the MSI database package for the Office XP product (for example, ProPlus.msi), and FeatureList is the list of feature names (case sensitive) that have to be reinstalled for the update:
    msiexec /i AdminPath\MSI FileREINSTALL=Feature List REINSTALLMODE=vomu
    To install all features, you can use REINSTALL=ALL, or you can install the following features:
    OUTLOOKNonBootFiles,OUTLOOKFiles
Note After you install the update, you cannot remove it.

For additional information about how to update your administrative installation and deploy to client workstations, click the following article number to view the article in the Microsoft Knowledge Base:
301348 HOW TO: Install a public update to administrative installations of Office XP
This article contains standard instructions for installing an administrative public update. You can also see the following article in the Microsoft Office Resource Kit:
http://www.microsoft.com/office/ork/2003/admin/xp/olk1007a.htm

How to determine whether the update is installed

The update contains updated versions of the following files:
   File name      Version
   -----------------------
   OUTLOOK.EXE   10.0.5709.0
   DLGSETP.DLL   10.0.5626.0
   ENVELOPE.DLL  10.0.4817.0
   EXCHCSP.DLL   10.0.5328.0
   EXSEC32.DLL   10.0.4907.0
   IMPMAIL.DLL   10.0.4406.0
   OUTLCM.DLL    10.0.5424.0
   OUTLCTL.DLL   10.0.5112.0
   OUTLLIB.DLL   10.0.5709.0
   OUTLMIME.DLL  10.0.4608.0
   OUTLPH.DLL    10.0.5703.0
   RECALL.DLL    10.0.4721.0
You do not have to install this update if you have a later version of one or more of the files that are listed in the table.

To determine the version of Outlook that is installed on your computer, follow these steps.

Note Because there are several versions of Microsoft Windows, the following steps may be different on your computer. If they are, see your product documentation to complete these steps.
  1. Click Start, and then click Search.
  2. In the Search Results pane, click All files and folders under Search Companion.
  3. In the All or part of the file name box, type Outlook.exe, and then click Search.
  4. In the list of files, right-click Outlook.exe, and then click Properties.
  5. On the Version tab, determine the version of Outlook that is installed on your computer.
For additional information about how to determine the version of product 2002 on your computer, click the following article number to view the article in the Microsoft Knowledge Base:
291331 HOW TO: Check the version of Office XP
Note If the Outlook 2002 Security Patch: KB828040 is already installed on your computer, you receive the following error message when you try to install the Outlook 2002 Security Patch: KB828040:
This update has already been applied or is included in an update that has already been applied.

Windows Installer update requirements

To install the update that is described in this article, you must have Windows Installer 2.0 or later installed. Both Microsoft Windows XP and Microsoft Windows 2000 Service Pack 3 (SP3) include Windows Installer 2.0 or later. To install the latest version of the Windows Installer, visit one of the following Microsoft Web sites.

Windows Installer for Microsoft Windows 95, Microsoft Windows 98, and Microsoft Windows Millennium Edition (Me):
http://www.microsoft.com/downloads/details.aspx?FamilyID=cebbacd8-c094-4255-b702-de3bb768148f%20&displaylang=en
Windows Installer for Microsoft Windows NT 4.0 and Windows 2000:
http://www.microsoft.com/downloads/details.aspx?familyid=4B6140F9-2D36-4977-8FA1-6F8A0F5DCA8F

List of issues that are fixed by the update

The Outlook 2002 Security Patch: KB828040 includes the following earlier released updates for Outlook 2002:
331866 Outlook 2002 update: December 4, 2002

The Outlook 2002 Security Patch: KB828040 fixes the issues that are described in the following Microsoft hotfix package articles:
822614 Outlook 2002 post-Service Pack 2 hotfix package: July 1, 2003
827970 Outlook 2002 post-Service Pack 2 hotfix package: September 12, 2003
823956 Outlook 2002 post-Service Pack 2 hotfix package: July 18, 2003
823970 Availability of the Outlook 2002 post-Service Pack 2 hotfix package: August 10, 2003
825813 Availability of the Outlook 2002 post-Service Pack 2 hotfix package: August 15, 2003
827137 Availability of the Outlook 2002 post-Service Pack 2 hotfix package: August 22, 2003
827146 Outlook 2002 post-Service Pack 2 hotfix package: August 29, 2003
823968 Outlook 2002 post-Service Pack 2 hotfix package: July 27, 2003
Outlook 2002 Security Patch: KB828040 fixes the issues that are described in the following Microsoft Knowledge Base articles:

330981 OL2002: Error message: The Exchange mailbox conferencing resource is not configured properly
817270 OL2002: Outlook phone dialer dials a zero before dialing an internal phone number
810488 An HTML-formatted e-mail message is not received by a recipient that uses a different e-mail protocol when it is sent in Outlook 2002
812478 OL2002: AlwaysSign or AlwaysEncrypt policy is not enforced on replied or forwarded messages
327573 Line breaks are not inserted as expected in the text of an e-mail message in Outlook 2002
329431 OL2000: Changes to a forwarded message cause undesirable changes to the original message
811950 OL2002: Transport provider is not notified if configuration changes when the provider is subscribed to the nkConfigHasChanged event
814377 OL2002: "Can't open this item. Operations on message headers can not be performed in this folder" error message when you open mail
814563 OL2002: Runtime error when you add a shortcut to your Windows NT 4.0-based computer
814556 OL2002: Error message: Microsoft Outlook could not access the specified folder location
814993 OL2002: Offline address book is downloaded when you configure Outlook for offline use
813949 OL2002: Remote mail downloads headers for deleted messages
815355 OL2002: The Free/Busy bar incorrectly displays busy for the whole day
816140 Info bar not updated when delegate accepts an exception to recurring meeting request
812480 OL2002: Outlook View Control returns only the current date
816020 OL2002: A calendar that you save as a Web page shows no appointments on the last day
814554 OL2002: "Set ActiveExplorer.CurrentFolder = Session.GetDefaultFolder(olFolder<FolderName>)" does not work as expected in the FolderSwitch event
816477 OL2002: You cannot send plain text only messages by using Extended MAPI
813565 OL2002: The "Duplicate Contact Detected" dialog box is not displayed when you save a contact that already exists to the Contacts folder
817030 OL2002: Public folder home page not available offline with no network connection
817325 OL2002: File As format changes to first name and last name
817420 OL2002: Error message: "Resource has declined your meeting because it is recurring"
818581 OL2002: Programmatically inserted attachment has blank icon and no caption
819103 OL2002: Keyboard language changes to a different language when you start Microsoft Outlook
818900 OL2002: File path does not convert to UNC when inserted as a hyperlink
819538 OL2002: E-mail messages that you send are lost if you pasted the address from a received e-mail message
819969 OL2002: The wrong name becomes the focus in the list of e-mail messages when you type a DBCS for the first character of the sender's display name
820367 OL2002: Error message in the Mso.dll file when you reply to an e-mail message that was sent by using the "Have Replies Sent To" option
820368 OL2002: The incorrect date and time appears for read receipts
820722 OL2002: Rules appear as turned off in the Rules Wizard
820733 OL2002: Programmatically inserted attachment has bank icon and no text
821188 OL2002: Error message "...The server is not available..." when you work offline
821291 OL2002:"The document entered into the Office document field is not associated with an Office application..." error message when you attach a Microsoft Office document to your online meeting request
819971 OL2002: Incorrect e-mail address in To box
817422 OL2002: "Always Ask Before Opening This Type of File" check box not available
821468 OL2002: Cannot set a filter when you programmatically create a Calendar View
821667 OL2002: You cannot use the Outlook Databinding control to view another user's Outlook folder
821804 OL2002: Tasks folder is repeatedly duplicated when you view the Mailbox folder of another user
822115 OL2002: Items in Sent Items folder may show as sent when the items were not delivered
817302 OL2000: Voting buttons are missing from e-mail messages that are opened on a DMS e-mail system
822846 OL2002: The attendee status is reset after you add a new attendee to a recurring meeting
822558 Custom form action causes Outlook to quit unexpectedly
823232 OL2002: The To box is automatically populated with recipients when you forward a meeting request
323612 OL2002: Error message: Microsoft LDAP Directory: Can't contact LDAP directory server (81)
813506 OL2002: "The value for appointment busy status is not valid" error message when you try to open an appointment
329098 OL2002: Add-ins are disabled if a process first starts Outlook


The Outlook 2002 Security Patch: KB828040 fixes the following issues that were previously not documented in the Microsoft Knowledge Base.

You can pass duplicate parameters to Outlook.exe

You can pass duplicate command line parameters to Outlook.exe.



If you remove Nortel encryption on a message, you may remove the text of the message

When you have a message in a personal folders (.pst) file that encrypted and signed with a Nortel certificate, and then you remove the encryption but leave the message signed, the body of the message becomes blank.


Word is not your e-mail editor when you add a custom user property

If you add a custom user property to an e-mail message in Microsoft Outlook, Microsoft Word no longer starts as your default e-mail editor when you try to forward or to reply to the modified e-mail message.

Note This problem occurs in both Rich Text Format (RTF) and HTML formatted e-mail messages.

Properties

Article ID: 828040 - Last Review: October 26, 2013 - Revision: 6.2
APPLIES TO
  • Microsoft Outlook 2002 Standard Edition
Keywords: 
kbnosurvey kbarchive kbsecurity kbinfo kbupdate KB828040

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com