SUMMARY
Microsoft has released an update to Microsoft Visio 2002.
This update offers the highest levels of stability and security available for
Microsoft Visio 2002. This update helps prevent unauthorized code from running
on your computer through any Microsoft Visio documents that were specifically
crafted to contain malicious Microsoft Visual Basic for Applications (VBA)
projects. This update is part of the continued effort by Microsoft to provide
the latest product updates to customers.
This article describes how
to download and install the Microsoft Visio 2002 Security Patch:
KB822212.
This update was first included in Microsoft Visio 2002
Service Pack 2.
For additional information about the latest
service pack for Visio 2002, click the following article number to view the
article in the Microsoft Knowledge Base:
867749
How to obtain the latest Visio 2002 Service Pack
MORE INFORMATION
How to download and install the update
Important Before you install this update, make sure that the following
requirement has been met:
- Microsoft Windows Installer 1.1
Before you install
this update, you must install Microsoft Windows Installer 1.1 or later. For
additional information about this requirement, see the "Windows Installer
Update Requirements" section of this article.
Office Product Updates Web site
If you installed Visio from a CD-ROM, use the Office Product
Updates Web site to automatically install all the latest updates that include
all available service packs and public updates.
Note We recommend that you install the client update by using the
Office Product Updates Web site. The Office Product Updates Web site detects
your particular installation of Microsoft Office and prompts you to install
exactly what you must have to make sure that your Office installation is
completely up-to-date.
To have the Office Product Updates Web site
detect the required updates that you must install on your computer, visit the
following Microsoft Web site:
After detection is complete, you receive a list of recommended
updates for your approval. Click
Start Installation to
complete the process.
Note After you install the update, you cannot remove it. To revert to
an installation before the update was installed, you must remove Visio, and
then install it again from the original CD-ROM.
Administrative update
If you installed Visio from a server location, the server
administrator must update the server location with the administrative update
and deploy that update to your computer.
If you are the server
administrator, follow these steps to download the administrative
update.
The
following file is available for download from the Microsoft Download
Center:
Download
the Visio2002-KB822212-FullFile-ENU.exe package
now. For additional information about how
to download Microsoft Support files, click the following article number to view
the article in the Microsoft Knowledge Base:
119591 How to Obtain Microsoft Support Files from Online Services
Microsoft scanned this file for viruses. Microsoft used the most
current virus-detection software that was available on the date that the file
was posted. The file is stored on security-enhanced servers that help to
prevent any unauthorized changes to the file.
After you click the link to download the
patch, follow these steps:
- In Windows Explorer, create a new folder on the C drive,
and then name it KB822212.
- Click Save to save the
Visio2002-KB822212-FullFile-ENU.exe file to the KB822212 folder.
- Click Start, click Run,
type cmd in the Open box, and then
click OK.
- At the command prompt, type the following lines, and then
press ENTER after each line:
cd\kb822212
Visio2002-KB822212-FullFile-ENU.exe /c /t:c:\kb822212
- Click Yes to accept the License Agreement.
- At the command prompt, type the following line, and then
press ENTER:
exit
- Note These steps assume that you are familiar with how to update your
administrative installation.
Click Start, and then
click Run. Type the following command in the
Open box msiexec /a Admin
Path\MSI File /p C:\KB822212\MSP File
SHORTFILENAMES=TRUE
where Admin Path is the path of your
administrative installation point for Visio 2002 (for example, C:\Visio),
MSI File is the .msi database package for Visio 2002
(for example, the Visio.msi file), and MSP File is
the name of the administrative update (for example,
Visio2002-KB822212-FullFile.MSP).
Note You can append /qb+ to the command line so that the End User License
Agreement dialog box does not appear. When you update the Chinese,
Korean, or Japanese language versions of a Visio 2002 Administrative
Installation Point by using the localized version of the Visio 2002 Security
Patch: KB822212, do not use the SHORTFILENAMES=TRUE option in the command line. If you use the SHORTFILENAMES=TRUE option in the command line with these language versions, a
Windows Installer error may occur. - To deploy the update to the client workstations, click
Start, and then click Run. Type the following
command in the Open box
msiexec /i Admin
Path\MSI File
REINSTALL=Feature List REINSTALLMODE=vomu
where Admin Path is the path of your
administrative installation point for Visio 2002 (for example, C:\Visio),
MSI File is the MSI database package for Visio 2002
(for example, the Visio.msi file), and Feature List
is the list of feature names (case sensitive) that have to be reinstalled for
the update. To install all features, you can use REINSTALL=ALL or you can use the following feature:
Additional information about how to deploy Visio updates in a
corporate environment is available in the Microsoft Visio 2002 Resource Kit.
For additional information about the Microsoft Visio 2002 Resource
Kit, visit the following Microsoft Web site:
How to determine whether the update is installed
The update contains updated versions of the following files:
File name Version
-----------------------
Vbe6.dll 6.4.99.69
To determine if the update that is installed on your computer,
follow these steps.
Note Because there are several versions of Microsoft Windows, the
following steps may be different on your computer. If they are, see your
product documentation to complete these steps.
- Click Start, and then click
Search.
- In the Search Results pane, click
All files and folders under Search Companion.
- In the All or part of the file name box,
type vbe6.dll, and then click
Search.
- In the list of files, right-click
vbe6.dll, and then click Properties.
- On the Version tab, determine the version
of the vbe6.dll file that is installed on your computer.
Note If the Microsoft Visio 2002 Security Patch: KB822212 is already
installed on your computer, you receive the following error message when you
try to install the Microsoft Visio 2002 Security Patch: KB822212:
This update has already been applied or is included in an update
that has already been applied.
Version information in the Visual Basic Editor is incorrect
In the Visual Basic Editor when you click the
Help menu and then click
About, the dialog
box contains the incorrect VBA version information. The following information
is incorrect:
- Microsoft Visual Basic 6.3
- VBA: Retail 6.4.8869
However, the following information is correct:
Windows Installer update requirements
To install the update that is described in this article requires
Windows Installer 1.1 or later. Both Microsoft Windows XP and Microsoft Windows
2000 include the appropriate version of Windows Installer. To install the
latest version of the Windows Installer, visit one of the following Microsoft
Web sites.
Windows Installer for Microsoft Windows 95, Microsoft
Windows 98, and Microsoft Windows Millennium Edition (Me):
Windows Installer for Microsoft Windows NT 4.0 and Windows 2000:
List of issues that are fixed by the update
The Microsoft Visio 2002 Security Patch: KB822212 fixes the
following issues that were previously not documented in the Microsoft Knowledge
Base:
- Visio Documents That Contain Malicious VBA Projects May Run Unauthorized Code
Office Visio documents that were specifically crafted to
contain malicious VBA projects may run unauthorized code on your
computer.