Page 1 of 2 12 LastLast
Results 1 to 15 of 29
  1. #1
    iNET Interactive
    Join Date
    Jan 2010
    Location
    Seattle, WA, USA
    Posts
    380
    Thanks
    1
    Thanked 29 Times in 24 Posts

    Office File Validation patch leads to problems




    PATCH WATCH


    Office File Validation patch leads to problems


    By Susan Bradley

    Microsoft's Office File Validation update is not playing well with Excel, and the company knows it.

    So your top update priority is not the usual round of security patches, but it's hiding and ignoring this problematic OFV update.

    The full text of this column is posted at WindowsSecrets.com/patch-watch/office-file-validation-patch-leads-to-problems (opens in a new window/tab).

    Columnists typically cannot reply to comments here, but do incorporate the best tips into future columns.
    Last edited by Tracey Capen; 2011-07-13 at 17:19.

  2. #2
    Star Lounger
    Join Date
    Apr 2001
    Location
    Melbourne, Australia
    Posts
    53
    Thanks
    2
    Thanked 1 Time in 1 Post
    Thanks as always for this information.
    Could I invite you to consider listing patches in numeric order, rather than status, please? This would make it easier to find if you have included a particular patch.

    Is there a consolidated list somewhere (eg on this lounge somewhere)? I have lots of patches being proposed that are not on your current list, so maybe I missed them some time.

    Geoffrey

  3. The Following User Says Thank You to ggrinton For This Useful Post:

    jackosullivan (2011-07-16)

  4. #3
    New Lounger
    Join Date
    May 2010
    Location
    Mississauga, Ontario, Canada
    Posts
    1
    Thanks
    0
    Thanked 0 Times in 0 Posts
    Hi Susan!

    I read you Patch Watch Column religiously and find your advice very accurate and timely. My comment relates to the most recent set of patches pushed by Microsoft Update. It does appear to me that these are not ready for prime time. Of the 6 patches received, only two installed properly for me - Windows Malicious Software Removal Tool x64 - July 2011 (KB890830) and Definition Update for Windows Defender - KB915597 (Definition 1.107.1567.0). The other four did not - KB2507938, KB2532521, KB2555917 and KB2533623.

    The install of these latter patches seemed to go well but on reboot, the installation aborts and then it recovers to pre-patch attempt state. I spent over two hours following the instructions to overcome the install error code 80070020 - update in safe mode and update in a Windows clean start (without boot-up third party software drivers). Neither worked. The first method overlooks the fact that Windows Update does not work in safe mode. The second method just does not result in the updates installing.

    I'm sure that you will hear more about this from others. I will be interested in seeing your views on these matters.

    Take care!


    Lou Vaccarello

  5. #4
    2 Star Lounger
    Join Date
    Jun 2001
    Location
    Oregon, USA
    Posts
    169
    Thanks
    45
    Thanked 2 Times in 2 Posts
    Echo Geoffrey's request. And his request for a consolidated list!

  6. #5
    3 Star Lounger
    Join Date
    Jul 2010
    Location
    Raleigh, NC
    Posts
    211
    Thanks
    11
    Thanked 20 Times in 17 Posts

    Question Additional 7/12 patch not listed in Patch Watch

    @Susan: In addition to the patches you discussed in listed in the 7/14 Patch Watch, I was also offered KB2532531 (Security Update for Windows 7 for x64-based Systems).

    Please advise.

  7. #6
    3 Star Lounger
    Join Date
    Jul 2010
    Location
    Raleigh, NC
    Posts
    211
    Thanks
    11
    Thanked 20 Times in 17 Posts

    Arrow 3 of 4 patches installed with no problems

    Quote Originally Posted by Latina114 View Post
    Of the 6 patches received, only two installed properly for me - Windows Malicious Software Removal Tool x64 - July 2011 (KB890830) and Definition Update for Windows Defender - KB915597 (Definition 1.107.1567.0). The other four did not - KB2507938, KB2532521, KB2555917 and KB2533623.
    Lou, I was offered three of the four patches you noted as unsuccessful for my x64 Pro system. The only one I didn't see was KB2532521, nor do I have any record of having previously installed it. The other three patches installed OK on the first try, which causes me to wonder if your problem lies with KB2532521.

    According to Microsoft Security Bulletin MS11-053, KB2532521 relates to the Bluetooth Stack patch that Susan referenced in her latest Patch Watch article (KB2566220). I wonder why you were offered KB2532521 instead of KB2566220?

    Also, the only other mention of a problem with this specific group of four patches was in a question on Microsoft Answers (which currently has no answers, of course). This person is a developer whose problem had to do with a specific code execution issue. Not the same as your problem, of course, but perhaps a clue to someone who is more knowledgeable than either of us.

    @Susan: Perhaps you could look at that disparity of KB offerings?

    Anyone else have either a successful install or problems installing KB2532521?

  8. #7
    Lounger
    Join Date
    Apr 2011
    Posts
    41
    Thanks
    2
    Thanked 3 Times in 3 Posts
    KB 2518864 (MS11-044): I am being offerred two patches that both relate to .NET Framework 2.0 SP3 and 3.5 SP1. The current Patch Chart refers only to the .NET Framework patches in MS11-039, but does not included recommended action for the .NET Framework patches in MS11-044 which Susan discussed in her June 29th column. Is KB 2518864 also a "Skip and hide?"

    KB 2512827: The current chart does not include a recommended action for the Silverlight patch addressing a combined vulnerability in Silverlight and .NET, which in Susan's June 16th column was a "Wait." What is the recommended action for KB 2512827?

    Thanks.
    MarciaG

  9. #8
    Lounger
    Join Date
    Apr 2011
    Posts
    41
    Thanks
    2
    Thanked 3 Times in 3 Posts
    KB 2539520 (Office 2007 patch): The current chart recommends "Wait" on KB 2539581, an Office 2003 nonsecurity update, but doesn't include a recommendation for KB 2539530, which looks like the same update for Office 2007. I've been offerred both updates, I assume because while I have Office 2003, I've also installed Office 2007 compatibility. Am I correct that the two patches should be treated the same and both are a "Wait?" Thanks.
    MarciaG

  10. #9
    New Lounger
    Join Date
    Nov 2001
    Location
    The Woodlands, Texas, USA
    Posts
    16
    Thanks
    1
    Thanked 5 Times in 1 Post
    Susan,
    Thanks for all you do in trying to keep us safe despite Micros - - t's worst efforts! ;-)

    Please add my vote to Geoffrey's and Auggie's regarding your "Regularly updated problem-patch chart". This is perhaps the most useful maintainer's tool available, but it could become a true must-have if you could post a consolidated version sorted by number -- or even better sortable via column heading.

    Thanks again, and God bless!
    Jack O'Sullivan

  11. #10
    Lounge VIP bobprimak's Avatar
    Join Date
    Feb 2009
    Location
    Hinsdale, IL, USA
    Posts
    2,483
    Thanks
    176
    Thanked 152 Times in 129 Posts
    Quote Originally Posted by MarciaG View Post
    KB 2518864 (MS11-044): I am being offerred two patches that both relate to .NET Framework 2.0 SP3 and 3.5 SP1. The current Patch Chart refers only to the .NET Framework patches in MS11-039, but does not included recommended action for the .NET Framework patches in MS11-044 which Susan discussed in her June 29th column. Is KB 2518864 also a "Skip and hide?"

    KB 2512827: The current chart does not include a recommended action for the Silverlight patch addressing a combined vulnerability in Silverlight and .NET, which in Susan's June 16th column was a "Wait." What is the recommended action for KB 2512827?

    Thanks.
    MarciaG
    As noted repeatedly in Susan's columns, .NET patches can go by a number of apparently different KB Numbers. The MS Numbers are the only reliable way to tell which patch the KB Articles are really referring to.

    Along the same lines, I'd be willing to bet that the KB2532521 article is merely an update of the KB2532520 article Susan mentioned in her column. Again, it is the MS Number which counts, not the KB Number.

    I'll let Susan explain the .NET-Silverlight security connection. That one is beyond my current knowledge.
    Last edited by bobprimak; 2011-07-17 at 14:20.
    -- Bob Primak --

  12. #11
    Lounger
    Join Date
    Apr 2011
    Posts
    41
    Thanks
    2
    Thanked 3 Times in 3 Posts
    Quote Originally Posted by bobprimak View Post
    As noted repeatedly in Susan's columns, .NET patches can go by a number of apparently different KB Numbers. The MS Numbers are the only reliable way to tell which patch the KB Articles are really referring to.

    Along the same lines, I'd be willing to bet that the KB2532521 article is merely an update of the KB2532520 article Susan mentioned in her column. Again, it is the MS Number which counts, not the KB Number.

    I'll let Susan explain the .NET-Silverlight security connection. That one is beyond my current knowledge.
    Thanks Bob. I do understand that it's the MS Number that counts. When my KB Number isn't in Susan's column I do always attempt to get to the MS Bulletin and then search for that in Susan's column.

    So, to rephrase my question re the .NET patches: What is the recommendation re MS11-044 .NET patches? In her June 29th column Susan discussed waiting on the MS11-044 patches, which she lists by KB number, along with the MS11-039's, but the July 14th list has a recommendation only for the patches in MS11-039, but no recommendation for those in MS11-044.

    RE the Office 2007 patch: I meant to ask what the recommendation is for KB 2539530 (not KB 2539520). The KB 2539530 patch appears to be the same nonsecurity update for Office 2007 as KB 2539581 is for Office 2003. I cannot find an MS Number for either -- the link in each patch explanation goes to an article with an ID number that is the same as the KB number.

    MarciaG

  13. #12
    Lounger
    Join Date
    Nov 2009
    Location
    Ridley Park, PA
    Posts
    25
    Thanks
    0
    Thanked 1 Time in 1 Post
    Quote Originally Posted by bethel95 View Post
    @Susan: In addition to the patches you discussed in listed in the 7/14 Patch Watch, I was also offered KB2532531 (Security Update for Windows 7 for x64-based Systems).

    Please advise.
    Similar issue here except this patch, KB2532531, was successfully installed on my Windows 7 computer last week and it showed up again this week. MS says that this might happen in relation to another patch, KB2552343. I donít know if that patch has ever been installed on my computer. And since MS doesnít offer any reasonable way to determine whether or not a patch has been installed previously - other than reading down through the list of installed patches, which is now dozens of pages long here - I am not certain if I need to install this again or if it is just one of those rogue patches that forever wants to be reinstalled.

    I really HATE Microsoft's patch system!

    Jim

  14. #13
    3 Star Lounger midnight's Avatar
    Join Date
    Dec 2010
    Location
    Almost Deep East Texas
    Posts
    352
    Thanks
    42
    Thanked 8 Times in 7 Posts
    Quote Originally Posted by JMac001 View Post
    . And since MS doesn’t offer any reasonable way to determine whether or not a patch has been installed previously - other than reading down through the list of installed patches,Jim
    You don't have to read down through that list. Go to Control Panel/uninstall programs/view installed updates and type the KB number in the search box. BINGO. It will tell you yes or no in a skinny minute.

    BJ

  15. #14
    Lounger
    Join Date
    Nov 2009
    Location
    Ridley Park, PA
    Posts
    25
    Thanks
    0
    Thanked 1 Time in 1 Post
    Thanks BJ - I hadn't noticed that; I mainly use Revo Uninstaller rather than the one provided in Windows. Plus I guess I am remembering back when Microsoft did not list the individual KB #'s in the Remove Programs dialog.

    Thanks again!

    Jim

    PS - BTW it was never installed; never offered to me for that matter. And I saw a note on the MS page for KB2532531 saying that there is a problem for many where that patch keeps being offered even after its successful installation. I'll just keep ignoring it.

  16. #15
    Lounger
    Join Date
    Feb 2011
    Posts
    41
    Thanks
    17
    Thanked 1 Time in 1 Post
    In view of Bob's comment #10 above, it seems likely that KB2552343 might have to be installed prior to KB532531 to avoid the latter being offered repeatedly. I'm going to try that right after lunch, so will check back and report my results.

    Thanks to all for all the info

    Gary

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •