Description of the PowerPoint 2000 SR-1 Macro Modification security update (306603)

SUMMARY

Microsoft has released an update to Microsoft PowerPoint 2000 SR-1. This update addresses a vulnerability that could allow malicious code to run in a PowerPoint file without warning. Under normal circumstances, you receive a warning in PowerPoint 2000 when you open a document that contains macros. However, it is possible for a malicious user to modify the macros in such a way that a macro can run with no warning issued. This could cause damage to data or allow unauthorized retrieval of data from your computer when you visit a Web site or open an e-mail message. After you apply this update, you receive a warning before you open a PowerPoint file that contains macros.

For more information on this issue, see the Microsoft Security Bulletin MS01-50: Malformed Excel or PowerPoint Document Can Bypass Macro Security

This article describes how to download and install the PowerPoint 2000 SR-1 Macro Modification Security Update.

For additional information about the latest service pack for Microsoft Office 2000, click the following article number to view the article in the Microsoft Knowledge Base:

276367 OFF2000: How to Obtain the Latest Office 2000 Service Pack

MORE INFORMATION

How to Download and Install the Update

Use one of the following methods to install the update, as appropriate to your situation.

Client Update

If you installed Office 2000 from a CD-ROM, follow these steps to download and install the client update:

With your Web browser, browse to the following Microsoft Web site:
http://office.microsoft.com/downloads/2000/p2kmac.aspx
Click Download Now, click Save this program to disk, and then click OK.
Click Save to save the p2kmac.exe file to the selected folder.
In Windows Explorer, double-click p2kmac.exe.
If you are prompted to install the update, click Yes.
Click Yes to accept the License Agreement.
Insert your Office 2000 CD-ROM when you are prompted to do so, and then click OK.
When you receive a message that indicates the update was applied successfully, click OK.

NOTE: After you install the public update, you cannot remove it.

Administrative Update

If you installed Office 2000 from a server location, the server administrator must update the server location with the administrative public update and deploy that update to your computer.

If you are the server administrator, follow these steps to download the administrative update:

Browse to the following Microsoft Web site:
http://download.microsoft.com/download/powerpoint2000/p2kmac/1/w98nt42kme/en-us/p2kmac_a.exe
Download the file to your desktop.
In Windows Explorer, double-click the p2kmac_a.exe file.
Click Yes to accept the License Agreement.
In the Please type the location where you want to place the extracted files box, type C:\p2kmac_a, and then click OK.
Click Yes when you are prompted to create the folder.
If you are familiar with the procedure for updating your administrative installation, click Start, and then click Run. Type the following command in the Open box
msiexec /a admin path\MSI file /p C:\p2kmac_a\powerpnt_admin.msp SHORTFILENAMES=1
where admin path is the path to your administrative installation point for Office 2000 (for example, C:\Office2000), and where MSI file is the MSI database package for the Office 2000 product (for example, Data1.msi).
To deploy the update to the client workstations, click Start, and then click Run. Type the following command in the Open box
msiexec /i admin path\MSI file REINSTALL=PPTFiles,PPTNonBootFiles REINSTALLMODE=vomus
where admin path is the path to your administrative installation point for Office 2000 (for example, C:\Office2000), and where MSI file is the MSI database package for the Office 2000 product (for example, Data1.msi).

WARNING: Any workstation that was installed from this administrative installation point before you installed the update, cannot use this administrative installation for repairing Office or adding new features. To do this you must update the workstations first.

For additional information about how to update your administrative installation and deploy to client workstations, click the article number below to view the article in the Microsoft Knowledge Base:

304165 OFF2000: How to Install an Update to Administrative Installations

This article contains standard instructions for installing an administrative public update.

Or, you can see the following article in the Microsoft Office XP Resource Kit:

http://www.microsoft.com/office/ork/xp/journ/Pp2k.htm

How to Determine Whether the Public Update Is Installed

The update replaces the file Powerpnt.exe. The version of Microsoft PowerPoint 2000 that is displayed when you click About Microsoft PowerPoint on the Help menu is updated to 9.0.5519.

Issues Fixed by the Update

The update fixes the issues described in the following Microsoft Knowledge Base articles:

272376 PPT2000: Slide Shows Are Slower Than in PowerPoint 97

235622 PPT2000: Hide on Next Mouse Click Happens on Next Animation Not on Next Mouse Click

289866 PPT2000: Font Changes When You Copy Text Box and Paste as Picture

296808 PPT2000: Style Changes When You Copy and Paste a Text Box Grouped with Another Shape

Other Issues Fixed in This Release

Additionally, the following issues are also fixed:

Error When Opening Files Resulting in Buffer Overrun
Certain malformed PowerPoint files can cause a buffer overrun and allow malicious code to be run. The file can either be on the Web or a local file.

Font Spacing Incorrect on Embedded Excel Chart
Text in embedded Excel charts may print too close together, as the option to print inserted objects at the printer's resolution is ignored.

Double-clicking a File Displays Benchmarking Menu
When you double-click a presentation in Windows Explorer, PowerPoint displays a debug dialog for benchmark switches instead of opening the file. This happens when the file name contains a hyphen (-) followed by the number sign (#), and then any number.

Mouse Cursor Type Does Not Change When Using IME
When you are using the Input Method Editor (IME) in PowerPoint, the mouse cursor can get stuck in input mode, and not change as expected to other modes.

Change in Binary File Can Bypass Macro Controls
A PowerPoint presentation can be changed in such a way that the macros in the file will run without prompting a macro warning or being stopped by macro controls.