KB 973346

Hi,

After installing KB 973346 (MS09-032: Cumulative Security Update of ActiveX
Kill Bits) my custom Microsoft Access Application (written in VBA) using
datagrid controls (msdatgrd.ocx) does not work properly anymore.

The datagrids are not loaded and are shown as empty.

When I uninstall KB 973346, then my application works properly again.

Has anybody already experienced this issue? Can anyone help?

Thanks a lot in advance!!

Update your Visual Studio applications, Bart, and check-in at Windows Update
more frequently or enable Automatic Updates. KB973346 includes
previously-released killbits that are causing this behavior and those
killbits were released months ago.

If you need assistance, see the "How to obtain help..." section of KB973346.

--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Client - since 2002


Bart Buvens wrote:
> Hi,
>
> After installing KB 973346 (MS09-032: Cumulative Security Update of
> ActiveX
> Kill Bits) my custom Microsoft Access Application (written in VBA) using
> datagrid controls (msdatgrd.ocx) does not work properly anymore.
>
> The datagrids are not loaded and are shown as empty.
>
> When I uninstall KB 973346, then my application works properly again.
>
> Has anybody already experienced this issue? Can anyone help?
>
> Thanks a lot in advance!!

Hello Bart,

Microsoft just announced that it has two out-of-band patches coming this
Tuesday. (tomorrow)

One of them is for Internet Explorer 6, 7 and 8.

The second hole is in Visual Studio, and apparently it’s directly related to
this hole in IE.

Source:
http://www.askwoody.com/category/mic...ches-security/
-=-

"Bart Buvens" wrote:

> Hi,
>
> After installing KB 973346 (MS09-032: Cumulative Security Update of ActiveX
> Kill Bits) my custom Microsoft Access Application (written in VBA) using
> datagrid controls (msdatgrd.ocx) does not work properly anymore.
>
> The datagrids are not loaded and are shown as empty.
>
> When I uninstall KB 973346, then my application works properly again.
>
> Has anybody already experienced this issue? Can anyone help?
>
> Thanks a lot in advance!!
>

The out-of-band updates scheduled to be released on 28 July 2009 will not
address Bart's killbit problems, Engel. Sorry.

Ǝиçεl wrote:
> Hello Bart,
>
> Microsoft just announced that it has two out-of-band patches coming this
> Tuesday. (tomorrow)
>
> One of them is for Internet Explorer 6, 7 and 8.
>
> The second hole is in Visual Studio, and apparently it’s directly related
> to
> this hole in IE.
>
> Source:
> http://www.askwoody.com/category/mic...ches-security/
> -=-
>
> "Bart Buvens" wrote:
>
>> Hi,
>>
>> After installing KB 973346 (MS09-032: Cumulative Security Update of
>> ActiveX
>> Kill Bits) my custom Microsoft Access Application (written in VBA) using
>> datagrid controls (msdatgrd.ocx) does not work properly anymore.
>>
>> The datagrids are not loaded and are shown as empty.
>>
>> When I uninstall KB 973346, then my application works properly again.
>>
>> Has anybody already experienced this issue? Can anyone help?
>>
>> Thanks a lot in advance!!

Hi PA Bear,

Thanks a lot for the quick response.

I'm working within an environment where a individual release management
department governs the Windows Updates. So I do not have the power to enable
the Windows update service on my pc.

I can only say that the Access application was working last Friday and after
they installed (during the weekend), the following patches: MS09-028,
MS09-029, MS09-032 and MS09-033. The application stopped working properly.

If you refer to previously released killbits, are you then refering to
patch: MS08-023?

Nevertheless I thought that MS09-032 replaced MS08-023.

Kind regards,

Bart

"PA Bear [MS MVP]" wrote:

> Update your Visual Studio applications, Bart, and check-in at Windows Update
> more frequently or enable Automatic Updates. KB973346 includes
> previously-released killbits that are causing this behavior and those
> killbits were released months ago.
>
> If you need assistance, see the "How to obtain help..." section of KB973346.
>
> --
> ~Robear Dyer (PA Bear)
> MS MVP-IE, Mail, Security, Windows Client - since 2002
>
>
> Bart Buvens wrote:
> > Hi,
> >
> > After installing KB 973346 (MS09-032: Cumulative Security Update of
> > ActiveX
> > Kill Bits) my custom Microsoft Access Application (written in VBA) using
> > datagrid controls (msdatgrd.ocx) does not work properly anymore.
> >
> > The datagrids are not loaded and are shown as empty.
> >
> > When I uninstall KB 973346, then my application works properly again.
> >
> > Has anybody already experienced this issue? Can anyone help?
> >
> > Thanks a lot in advance!!
>
>

Bart Buvens wrote:

> I can only say that the Access application was working last Friday and after
> they installed (during the weekend), the following patches: MS09-028,
> MS09-029, MS09-032 and MS09-033. The application stopped working properly.
>
> If you refer to previously released killbits, are you then refering to
> patch: MS08-023?
>
> Nevertheless I thought that MS09-032 replaced MS08-023.

PA Bear's point, I think, is that MS08-023 should have broken the application in
question ages ago, as it contains the same killbits.

Assuming we've identified the problem correctly, Visual Basic (or Visual Studio)
needs to have MS08-070 installed. If you have Visual Basic/Studio on your own
computer applying MS08-070 should fix the problem directly. Otherwise, it needs
to be installed on the application developer's computer, and the application
repackaged to include the latest version of the controls and reinstalled on your
computer.

It is also possible that the application you are trying to run is not the
application which added the datagrid controls to your computer. In this case,
it is the latter application which needs to be updated.

Harry.

>
> Kind regards,
>
> Bart
>
> "PA Bear [MS MVP]" wrote:
>
>> Update your Visual Studio applications, Bart, and check-in at Windows Update
>> more frequently or enable Automatic Updates. KB973346 includes
>> previously-released killbits that are causing this behavior and those
>> killbits were released months ago.
>>
>> If you need assistance, see the "How to obtain help..." section of KB973346.
>>
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>>
>>
>> Bart Buvens wrote:
>>> Hi,
>>>
>>> After installing KB 973346 (MS09-032: Cumulative Security Update of
>>> ActiveX
>>> Kill Bits) my custom Microsoft Access Application (written in VBA) using
>>> datagrid controls (msdatgrd.ocx) does not work properly anymore.
>>>
>>> The datagrids are not loaded and are shown as empty.
>>>
>>> When I uninstall KB 973346, then my application works properly again.
>>>
>>> Has anybody already experienced this issue? Can anyone help?
>>>
>>> Thanks a lot in advance!!
>>

Hi Harry,

Thanks for your input.

I installed MS08-070 on my pc and you are right, everything is working fine
now! Of course my pc contains VB 6.0, so for the deployment of the
application to other users/pc's I will need to repackage. My only question
here is how this needs to be done? At this moment a simple MDE file was
created and used on different pc's.

This MDE file uses the settings of the pc on which it is executed, and these
pc's do not contain the MS08-070 fix, but do contain the MS09-032 fix which
causes the issue.

I'm only surprised that the MS09-032 fix causes also issues when using
datagrid controls in Access, while it is a fix meant for IE.

Kind regards,

Bart



"Harry Johnston [MVP]" wrote:

> Bart Buvens wrote:
>
> > I can only say that the Access application was working last Friday and after
> > they installed (during the weekend), the following patches: MS09-028,
> > MS09-029, MS09-032 and MS09-033. The application stopped working properly.
> >
> > If you refer to previously released killbits, are you then refering to
> > patch: MS08-023?
> >
> > Nevertheless I thought that MS09-032 replaced MS08-023.
>
> PA Bear's point, I think, is that MS08-023 should have broken the application in
> question ages ago, as it contains the same killbits.
>
> Assuming we've identified the problem correctly, Visual Basic (or Visual Studio)
> needs to have MS08-070 installed. If you have Visual Basic/Studio on your own
> computer applying MS08-070 should fix the problem directly. Otherwise, it needs
> to be installed on the application developer's computer, and the application
> repackaged to include the latest version of the controls and reinstalled on your
> computer.
>
> It is also possible that the application you are trying to run is not the
> application which added the datagrid controls to your computer. In this case,
> it is the latter application which needs to be updated.
>
> Harry.
>
> >
> > Kind regards,
> >
> > Bart
> >
> > "PA Bear [MS MVP]" wrote:
> >
> >> Update your Visual Studio applications, Bart, and check-in at Windows Update
> >> more frequently or enable Automatic Updates. KB973346 includes
> >> previously-released killbits that are causing this behavior and those
> >> killbits were released months ago.
> >>
> >> If you need assistance, see the "How to obtain help..." section of KB973346.
> >>
> >> --
> >> ~Robear Dyer (PA Bear)
> >> MS MVP-IE, Mail, Security, Windows Client - since 2002
> >>
> >>
> >> Bart Buvens wrote:
> >>> Hi,
> >>>
> >>> After installing KB 973346 (MS09-032: Cumulative Security Update of
> >>> ActiveX
> >>> Kill Bits) my custom Microsoft Access Application (written in VBA) using
> >>> datagrid controls (msdatgrd.ocx) does not work properly anymore.
> >>>
> >>> The datagrids are not loaded and are shown as empty.
> >>>
> >>> When I uninstall KB 973346, then my application works properly again.
> >>>
> >>> Has anybody already experienced this issue? Can anyone help?
> >>>
> >>> Thanks a lot in advance!!
> >>
>

Bart Buvens wrote:

> I installed MS08-070 on my pc and you are right, everything is working fine
> now! Of course my pc contains VB 6.0, so for the deployment of the
> application to other users/pc's I will need to repackage. My only question
> here is how this needs to be done? At this moment a simple MDE file was
> created and used on different pc's.
>
> This MDE file uses the settings of the pc on which it is executed, and these
> pc's do not contain the MS08-070 fix, but do contain the MS09-032 fix which
> causes the issue.

I'm not a VB/Access developer myself so I can't help you much with this - but
what you need to do is to distribute the new version of the msdatgrd.ocx file to
the computers. If the MDE file contains msdatgrd.ocx, you should be fine.
(Note that the computers would not have msdatgrd.ocx at all if it hadn't been
distributed to them at some point.)

One of the developer newsgroups can probably help.

> I'm only surprised that the MS09-032 fix causes also issues when using
> datagrid controls in Access, while it is a fix meant for IE.

MS09-032 is a killbit update. It doesn't fix issues in IE, rather it prevents
issues in another products or components from being exploited via IE. It does
this by preventing vulnerable controls from being loaded - in this case the old
version of msdatgrd.ocx.

Harry.

>
> Kind regards,
>
> Bart
>
>
>
> "Harry Johnston [MVP]" wrote:
>
>> Bart Buvens wrote:
>>
>>> I can only say that the Access application was working last Friday and after
>>> they installed (during the weekend), the following patches: MS09-028,
>>> MS09-029, MS09-032 and MS09-033. The application stopped working properly.
>>>
>>> If you refer to previously released killbits, are you then refering to
>>> patch: MS08-023?
>>>
>>> Nevertheless I thought that MS09-032 replaced MS08-023.
>> PA Bear's point, I think, is that MS08-023 should have broken the application in
>> question ages ago, as it contains the same killbits.
>>
>> Assuming we've identified the problem correctly, Visual Basic (or Visual Studio)
>> needs to have MS08-070 installed. If you have Visual Basic/Studio on your own
>> computer applying MS08-070 should fix the problem directly. Otherwise, it needs
>> to be installed on the application developer's computer, and the application
>> repackaged to include the latest version of the controls and reinstalled on your
>> computer.
>>
>> It is also possible that the application you are trying to run is not the
>> application which added the datagrid controls to your computer. In this case,
>> it is the latter application which needs to be updated.
>>
>> Harry.
>>
>>> Kind regards,
>>>
>>> Bart
>>>
>>> "PA Bear [MS MVP]" wrote:
>>>
>>>> Update your Visual Studio applications, Bart, and check-in at Windows Update
>>>> more frequently or enable Automatic Updates. KB973346 includes
>>>> previously-released killbits that are causing this behavior and those
>>>> killbits were released months ago.
>>>>
>>>> If you need assistance, see the "How to obtain help..." section of KB973346.
>>>>
>>>> --
>>>> ~Robear Dyer (PA Bear)
>>>> MS MVP-IE, Mail, Security, Windows Client - since 2002
>>>>
>>>>
>>>> Bart Buvens wrote:
>>>>> Hi,
>>>>>
>>>>> After installing KB 973346 (MS09-032: Cumulative Security Update of
>>>>> ActiveX
>>>>> Kill Bits) my custom Microsoft Access Application (written in VBA) using
>>>>> datagrid controls (msdatgrd.ocx) does not work properly anymore.
>>>>>
>>>>> The datagrids are not loaded and are shown as empty.
>>>>>
>>>>> When I uninstall KB 973346, then my application works properly again.
>>>>>
>>>>> Has anybody already experienced this issue? Can anyone help?
>>>>>
>>>>> Thanks a lot in advance!!

Hi Harry,

Thanks a lot you have pushed me in to the right direction!

I also found the same answer on thread 'KB960715 blocks msflxgrd.ocx in
VBA', which gave the solution to my problem.

I was able to solve the problem with msdatgrd.ocx by installing MS08-070
since my pc contains VB6.0. However for the client pc's this was no option
since they don't have VB6.0 installed.

How I solved the problem on the client pc's:
- I took the latest version of msdatgrd.ocx, along with the files
msdatgrd.srg and msdatgrd.dep from my pc.
- On every client pc you do the following:
* unregister msdatgrd.ocx
* copy/paste the 3 files into C:\Windows\system32
* register msdatgrd.ocx
- The application works!

So putting the latest version of msdatgrd.ocx on the client pc's fixes the
problem.

Thanks again for all of your support!

Cheers,

Bart


"Harry Johnston [MVP]" wrote:

> Bart Buvens wrote:
>
> > I installed MS08-070 on my pc and you are right, everything is working fine
> > now! Of course my pc contains VB 6.0, so for the deployment of the
> > application to other users/pc's I will need to repackage. My only question
> > here is how this needs to be done? At this moment a simple MDE file was
> > created and used on different pc's.
> >
> > This MDE file uses the settings of the pc on which it is executed, and these
> > pc's do not contain the MS08-070 fix, but do contain the MS09-032 fix which
> > causes the issue.
>
> I'm not a VB/Access developer myself so I can't help you much with this - but
> what you need to do is to distribute the new version of the msdatgrd.ocx file to
> the computers. If the MDE file contains msdatgrd.ocx, you should be fine.
> (Note that the computers would not have msdatgrd.ocx at all if it hadn't been
> distributed to them at some point.)
>
> One of the developer newsgroups can probably help.
>
> > I'm only surprised that the MS09-032 fix causes also issues when using
> > datagrid controls in Access, while it is a fix meant for IE.
>
> MS09-032 is a killbit update. It doesn't fix issues in IE, rather it prevents
> issues in another products or components from being exploited via IE. It does
> this by preventing vulnerable controls from being loaded - in this case the old
> version of msdatgrd.ocx.
>
> Harry.
>
> >
> > Kind regards,
> >
> > Bart
> >
> >
> >
> > "Harry Johnston [MVP]" wrote:
> >
> >> Bart Buvens wrote:
> >>
> >>> I can only say that the Access application was working last Friday and after
> >>> they installed (during the weekend), the following patches: MS09-028,
> >>> MS09-029, MS09-032 and MS09-033. The application stopped working properly.
> >>>
> >>> If you refer to previously released killbits, are you then refering to
> >>> patch: MS08-023?
> >>>
> >>> Nevertheless I thought that MS09-032 replaced MS08-023.
> >> PA Bear's point, I think, is that MS08-023 should have broken the application in
> >> question ages ago, as it contains the same killbits.
> >>
> >> Assuming we've identified the problem correctly, Visual Basic (or Visual Studio)
> >> needs to have MS08-070 installed. If you have Visual Basic/Studio on your own
> >> computer applying MS08-070 should fix the problem directly. Otherwise, it needs
> >> to be installed on the application developer's computer, and the application
> >> repackaged to include the latest version of the controls and reinstalled on your
> >> computer.
> >>
> >> It is also possible that the application you are trying to run is not the
> >> application which added the datagrid controls to your computer. In this case,
> >> it is the latter application which needs to be updated.
> >>
> >> Harry.
> >>
> >>> Kind regards,
> >>>
> >>> Bart
> >>>
> >>> "PA Bear [MS MVP]" wrote:
> >>>
> >>>> Update your Visual Studio applications, Bart, and check-in at Windows Update
> >>>> more frequently or enable Automatic Updates. KB973346 includes
> >>>> previously-released killbits that are causing this behavior and those
> >>>> killbits were released months ago.
> >>>>
> >>>> If you need assistance, see the "How to obtain help..." section of KB973346.
> >>>>
> >>>> --
> >>>> ~Robear Dyer (PA Bear)
> >>>> MS MVP-IE, Mail, Security, Windows Client - since 2002
> >>>>
> >>>>
> >>>> Bart Buvens wrote:
> >>>>> Hi,
> >>>>>
> >>>>> After installing KB 973346 (MS09-032: Cumulative Security Update of
> >>>>> ActiveX
> >>>>> Kill Bits) my custom Microsoft Access Application (written in VBA) using
> >>>>> datagrid controls (msdatgrd.ocx) does not work properly anymore.
> >>>>>
> >>>>> The datagrids are not loaded and are shown as empty.
> >>>>>
> >>>>> When I uninstall KB 973346, then my application works properly again.
> >>>>>
> >>>>> Has anybody already experienced this issue? Can anyone help?
> >>>>>
> >>>>> Thanks a lot in advance!!
>