Page 1 of 2 12 LastLast
Results 1 to 15 of 27
  1. #1
    Gold Lounger
    Join Date
    Feb 2003
    Location
    Wardrobe Malfunction Junction, Derry
    Posts
    2,953
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Critical Patch Multiple Office Apps September 3

    Microsoft released critical patches that load in one download for multiple Office version or Office related components and Visio today to correct a VBA document property checking buffer overrun when a document is opened by the host application. It covers 29 Office version components and those related to Office from 1997 through 2002. Because critical Office patches are rare, and because of the current climate I thought it best to put the reminder to your Office and related components here as the most apporpriate place.

    MS03-037 Flaw in Visual Basic for Applications Could Allow Arbitrary Code Execution (822715) Originally posted: September 03, 2003

    SMBP

  2. #2
    3 Star Lounger
    Join Date
    Jan 2001
    Location
    Seattle, Washington
    Posts
    320
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Critical Patch Multiple Office Apps September 3

    Well at least on this machine using Office 2003, no critical updates are available. At least the problems aren't passed along ad infinatum, anyway.

    kip

  3. #3
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Critical Patch Multiple Office Apps September 3

    <P ID="edit" class=small>(Edited by jscher2000 on 03-Sep-03 22:39. Uh oh - Office 97 users cannot use Office Update.)</P>You beat me to it. <img src=/S/grin.gif border=0 alt=grin width=15 height=15>

    I recommend visiting the Office Update site (http://office.microsoft.com/productupdates/) and using Microsoft's ActiveX control for this update. There are different patches for each version of Office, as well as "office-related" applications such as Publisher and Visio. In addition, there is a patch for the WordPerfect import filter and for the Access 2002 Report Viewer. I installed all of them this afternoon (except Visio; wouldn't install). So far, no severe problems I didn't have before.

    It is worth mentioning that even if you use Office 2000 or Office XP, you might need a supplemental VBA update, because you might have VBA-enabled third party applications that do not use the latest version. To see if you still have VBA 5 installed, check for this file after you run the Office Update for your version:

    C:Program FilesCommon FilesMicrosoft SharedVBAvbe.dll

    If you have that file, and the version number is not updated to 5.0.78.15, then you will need the specific VBA patch as well. You usually can get the version number from the file's properties dialog (right-click, properties). Since I do not have VBA 5, I'm not able to say whether Office Update will take care of you or not.

  4. #4
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Critical Patch Multiple Office Apps September 3

    I wouldn't count on that! Check your VBA DLL version number against this "post-patch" version number:

    C:Program FilesCommon FilesMicrosoft SharedVBAVBA6vbe6.dll = 6.4.99.69

  5. #5
    Gold Lounger
    Join Date
    Feb 2003
    Location
    Wardrobe Malfunction Junction, Derry
    Posts
    2,953
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Critical Patch Multiple Office Apps September 3

    Thanks for this--and that link will structure people to go to the MS Offfice site with the SB's first link-but I have noticed for the four other patches that came through the security bulletin service today, the Office "patchometer" said I was fine, and I was able to download them all individually.

    I had VB6 in that folder, so I went on and installed from your link, but I wonder why I didn't get it through the 5 emails today from the MS Security site. Maybe it was in there and I missed the link.

    SMBP

  6. #6
    Gold Lounger
    Join Date
    Feb 2003
    Location
    Wardrobe Malfunction Junction, Derry
    Posts
    2,953
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Critical Patch Multiple Office Apps September 3

    Maliciously Crafted Document Could Trigger Attack

    If Outlook's email client is set to use Word for your html web code for example, this is one more reason to scrutinize every attachment you open.

    SMBP

  7. #7
    Gold Lounger
    Join Date
    Feb 2003
    Location
    Wardrobe Malfunction Junction, Derry
    Posts
    2,953
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Critical Patch Multiple Office Apps September 3


  8. #8
    New Lounger
    Join Date
    Jun 2003
    Location
    Sussex, England
    Posts
    11
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Critical Patch Multiple Office Apps September 3

    All very welll and good ... but if one uses either MS Office autoupdate site or download the files individually (as per Woodys Watch) then the files go off looking for a file "datams1.msi" or something like that ... which of course doesn't exist on the hard drive and therefore the updates cannot be installed.

    Amazing stuff isn't it!

    Any ideas anyone???

  9. #9
    Gold Lounger
    Join Date
    Feb 2003
    Location
    Wardrobe Malfunction Junction, Derry
    Posts
    2,953
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Critical Patch Multiple Office Apps September 3

    Hello Martin--

    Sure. Often I experience that the updater Jefferson referred to simply doesn't work. Nothing to do with Jefferson of course, if Jefferson made it it would work-- it just ran and said I had what I didn't. I believe the Office updater has caught the same disease complex as its cousin Windows Update, and that they are probably incurable or maybe will be fixed with the Beta that was released two days ago the MSI 3.0 which I downloaded with all its info and Read MEs and is on my machine somewhere, (at least the registry and its homeboy Add/Remove say so, and has a couple of MSN Beta newsgroups, but is a challenge to find with XP Search or manually.

    Don't use the Office Update Site it for these. You have at least 3 types alternatives, and probably many more. There are literally hundereds of sites that would link you to a seamless download. The easiest way is my first suggestion below.

    1) If you go to Microsoft Security (Technet) click on the right 'task pane' and instead of clicking on the link to the Office Updater site, just click on the more information link in the bulletin. You'll get the correct link and download each of them no problem.

    2) Every of hundreds of XP and Windows Beta sites, lists all hotfixes--Windows of all flavors, Office, Servers of every Microsoft denomination always. Just google for them using "Windows XP/ Beta Sites."

    3) Microsoft has a newsletter service where you can subscribe to their many newsletters free. The Office Newsletter yesterday had direct links to all of them. Just go to the main site and on the top click the pulldown for newsletters. Additionally they have several newslettters that focus on their servers and all of them included this update with links.

    Subject: Inside_Microsoft_Office-Product_Updates_Alert

    SMBP

  10. #10
    New Lounger
    Join Date
    Jun 2003
    Location
    Sussex, England
    Posts
    11
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Critical Patch Multiple Office Apps September 3

    Hi and thanks for your reply ...

    Not being (originally) able to use the office update site, I had done as you suggested already and gone across to technet. AT that point I'm OK with the first update - it installs OK but after that they keep looking for the dreaded file - which if I remember correctly was the file that OSR 1A left on the HDD and said "safe to delete"! SO, no furher forward ... but what was that about MSI v.3?

    Best wishes,

    Martin

  11. #11
    Gold Lounger
    Join Date
    Feb 2003
    Location
    Wardrobe Malfunction Junction, Derry
    Posts
    2,953
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Critical Patch Multiple Office Apps September 3

    I don't know why they're looking for that file. I didn't have any trouble using Office Update with the first VB update--with the other four, I just downloaded them from the individual Security bulletins. I'd start over with them.

    As to MSI 3.0, my point was that they are hopefully going to do something about trouble with installs in general with this and the fact that they have 7 different installers across Microsoft's platforms. It was released to Beta testers on 9/2. It is contexted here:

    <A target="_blank" HREF="http://www.microsoft-watch.com/article2/0,4248,1213375,00.asp">One Small Step For Microsoft

  12. #12
    Super Moderator jscher2000's Avatar
    Join Date
    Feb 2001
    Location
    Silicon Valley, USA
    Posts
    23,112
    Thanks
    5
    Thanked 93 Times in 89 Posts

    Re: Critical Patch Multiple Office Apps September 3

    Office updates often ask you for the original CD, and the MSI file is a file on the CD. Put your CD in the drive first, and the installer should find it as needed during the process. If your copy of Office was installed from an administrative install point over a network, then check with your administrator on how to browse to the MSI file.

    In the past, some people have reported problems even with the right CD. The workaround was to copy the entire CD to some place on the hard drive, point the installer there and, when done, you can delete the now unnecessary folder. On the other hand, given the frequency of patches, and the slowness of accessing CDs, you might just want to leave it there!

  13. #13
    Lounger
    Join Date
    Oct 2001
    Location
    Mentor, Ohio, USA
    Posts
    41
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Critical Patch Multiple Office Apps September 3

    When I got home tonight, I was going to post a message asking what you all thought of the patch for Office 97. I found that for Office 97, you have to call for the patch for which a passworded download link to a "hot patch" is emailed to you. I received this but was told in my conversation with the Microsoft technician (and it is repeated in the email) that this hot fix "is not publicly available through the Microsoft website as it has not gone through full Microsoft regression testing." I use Word 97 both at home and at work. I was told if I have any problems with Word after installation, to call them back for assistance (and was given a case ID). What do you all have to say or think about installing this?

  14. #14
    Gold Lounger
    Join Date
    Feb 2003
    Location
    Wardrobe Malfunction Junction, Derry
    Posts
    2,953
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Critical Patch Multiple Office Apps September 3

    Robin--

    Install it and if it does anything you don't want, uninstall it. Can't you uninstall it from Add/Remove or the registry? I've gotten a few from them that haven't undergone 'regression analysis. Which Office 97 patch is it?

    SMBP

  15. #15
    Lounger
    Join Date
    Oct 2001
    Location
    Mentor, Ohio, USA
    Posts
    41
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Re: Critical Patch Multiple Office Apps September 3

    In talking with the technician this morning, it did not sound as if removing it would be as simple as "uninstalling."

    As for which patch, I am not sure what you are looking for. I just downloaded it and unzipped it, but all I got was jibberish in a Notepad window. Would you like me to forward the email to you?

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •