New Security Update MS11-022


Hotfix for Security Update MS11-022 released publicly as MS11-036

 

MS11-036: Description of the security update for PowerPoint 2002: May 10, 2011

Security Update for Microsoft PowerPoint 2002 (KB2535802) http://support.microsoft.com/kb/2535802

MS11-036: Description of the security update for PowerPoint 2003: May 10, 2011

Security Update for Microsoft Office PowerPoint 2003 (KB2535812) http://support.microsoft.com/kb/2535812

 

MS11-036: Description of the security update for PowerPoint 2007: May 10, 2011

Security Update for Microsoft Office PowerPoint 2007 (KB2535818) – http://support.microsoft.com/kb/2535818

 

Please review the ‘Known issues with this security update’ section of any of the KBs.



 ====================================================================================================



Hot Fix for Security Update MS11-022 Now Available

 

 

The hot fix is now available for the PowerPoint 2003 Security Update MS11-022. If you had previously removed the security update MS11-022, you do not need to reinstall it. Since the hot fix is cumulative, just install the hot fix and you should be secure.

 

The hotfix for PowerPoint 2002 – http://support.microsoft.com/kb/2543242

 

For deployment, the security team that produced the hotfix suggests:

“Once the PowerPoint hotfix becomes available, we suggest applying the hotfix via normal means of hotfix deployment. This would include installing it manually or by using tools such as SCCM/SMS or other 3rd party tools.”

 

The following blog entry offers some resources on how to publish MSP’s to internal WSUS deployments:

·         Adding Cumulative Updates to display in Windows Server Update Services Console:
http://blogs.technet.com/b/office_sustained_engineering/archive/2011/01/20/adding-cumulative-updates-to-display-in-windows-server-update-services-console.aspx

___________________________________________________________________________________________________________________________________________

___________________________________________________________________________________________________________________________________________

For the latest on this issue see Office Sustained Engineering blog post http://blogs.technet.com/b/office_sustained_engineering/archive/2011/04/12/april-2011-office-security-update-release.aspx

After applying MS11-022 you may receive the following error when attempting to open a PowerPoint presentation in PowerPoint 2003:

“PowerPoint was unable to display some of the text, images, or objects on slides in the file, “filename”, because they  have become corrupted. Affected slides have been replaced by blank slides in the presentation and it not possible to recover the lost information. To ensure that the file can be opened in previous versions of PowerPoint, use the Save As command (File menu) and save the file with either the same or a new name.”

For more information, please see KB2464588 MS11-022: Description of the security update for PowerPoint 2003: April 12, 2011
http://support.microsoft.com/kb/2464588

Workarounds:

  • Save a copy of the file, edit, and save.
    • Open presentation in PowerPoint 2003, after receiving the prompt click OK. File/Save As to save a copy of the file, make a minor modification (delete one character, insert it back), save the file.
  • Remove backgrounds and delete images from slide master.
  • Open file in 2007, make small change, and save.
  • Open file in 2007 and remove backgrounds and images in slide master.
  • Open file in 2010 and save as PPTX.
  • Open file in 2007 and save as Web Page (*.htm; *.html), then save back as ppt.

Comments (46)

  1. PPT 2003 hot fix released. Information updated in Blog..

  2. Aaron Rykhus says:

    blogs.technet.com/…/issues-after-installing-powerpoint-2003-update-kb2464588.aspx ->"In our June Public Update release, we will release the update through the Automatic Update channel, where any remaining users will be updated with the changes."

    Please comment on that blog post regarding the Automatic Updates comments in regards to the hotfix/security update.

    For those still reporting issues with KB2543241 hotfix applied I'm not sure what "same problem" means. Are you still seeing the error when opening the files? Does PowerPoint stop responding (hang)? Are you verifying the hotfix is installed in Add/Remove Programs with Show Updates checked? Powerpnt.exe should be at build 11.8335.xxxx if you have the hotfix applied.

    Also, if you saved the presentation after receving the error with KB2464588 security update, the hotfix KB2543241 won't get your data base. The content would be removed and cannot be recovered. KB2543241 just patches removes the existing presentations that haven't yet been saved after getting that error if that makes sense. Also, the KB2543241 hotfix includes the security updates in KB2464588 it just fixes the error.

  3. Aaron Rykhus says:

    I've seen similar issues and if you uncheck "Check spelling as you type" in Tools/Options/Spelling and Style in PowerPoint 2003 the problem goes away.

    My theory is the file was saved with the KB2464588 security update, they got the error, then saved the file and this somehow corrupted the file. But that's all hypothetical right now. I haven't had a chance to test this.

    There is one solution I found to fix the files. With one of the affected files, try inserting the slides into a new file by creating a new presentation and going to Insert > "Slides From Files…"/Browse, and check "Keep Source Formatting". That has worked in the cases I've seen.

  4. Aaron Rykhus says:

    PowerPoint 2002 hotfix was released over the weekend – support.microsoft.com/…/2543242

  5. Anonymous says:

    I had this problem too.

    After uninstalling the Security update for PowerPoint 2003 (KB2464588), most of my ppt files now open correctly, but now I get another nasty error: when I copy slides from a ppt file to another ppt file, if I select the "Keep source format" option, Powerpoint immediately crashes.

    Has anyone the same problem?

  6. Anonymous says:

    Thanks Aaron! (and a Big Thanks! to Susan Bradley!)

    It was a nightmare yesterday!

    Uninstalling "Security update for PowerPoint 2003 (KB2464588): POWERPNT" has worked for me. I've not been prompted to insert the disc that contains Microsoft Office PowerPoint 2003. Had made it two times, using W7 and using Windows XP.

    Thanks! (Again)

  7. Anonymous says:

    Downloading and installing the hot fix has worked for me on W7. Not tested on XP. (IMaybe it is *too* difficult to ask the hot fix, receive the mail, read the mail, download the hot fix, unzip, type password, unzip again to install the hotfix, etc.)

    Thanks!

  8. Bill Hefley, PhD says:

    Please note that KB2464588 (4/12/2011) does not fix this problem.

  9. mike says:

    Yes, I had the same issue with several users over the last 2 days. Once KB2462588 was installed, all of our images in Powerpoint were generating the corruption error message. I uninstalled the patch on all users and everyone is working fine. The Powerpoint files that were having the errors, are now working correctly. I didn't have to reboot either or get prompted for the install files for Office 2003. I am frustrated that when I searched on MS Knowledge yesterday with the error message, I didn't find anything referencing this problem.

  10. johnny says:

    Do you guys at Microsoft actually test anything? Do you know how many people and files this affected? Do you know how much time has been wasted?

  11. Frederik says:

    So according to what i read here, I have to go through a file server serving about 500+ users to find all ppt files then open 1 by 1 in office 2007 etc…. and then the problem is fixed, well I really like the idea that MS serves us with a brilliant patch "corrupting" powerpoint files…and this is the best what MS could come up with…I'm very sorry but for me the best sollution as support engineer was to go back to the WSUS server and mark the update for approval removal…the issue was fixed in no time.

    I hope that the next security patch for powerpoint fixes the security leak, but leaves my powerpoint files just the way they were.

    Greeting,

    Frederik

  12. Ethan Russo says:

    I was also affected by this, and the similar problem with the Excel Security Update that rendered me unable to even open the program.

    After 5 hours of work, I successfully deleted the offending updates, but already, my computer wants me to reload them. These should be eliminated by Microsoft and an appropriate update that works would then be welcome.

    BTW, I attempted to inform Microsoft of the problem, and those options are offline!

  13. MBD says:

    Unbelievable! I spent hours trying to figure out why my ppt kept crashing and giving messages about corrupt files. Finally saw online that the Security Update is actually CAUSING the problem. In the "Workarounds" – are they 6 different workarounds? Doesn't seem to make much sense. If it is, I tried #1 and it doesn't work for me.  Best workaround: UNINSTALL THE UPDATE!

  14. Ethan Russo says:

    I continue to be incensed over this. I hope that everyone will complain to Microsoft and insist on a patch that works properly.

  15. Mike Butsch says:

    In my Blog i explian how to Uninstall the Patch with Software Deployment for the german and english version. You can't uninstall or revoke it via WSUS. You can deny in WSUS but it want uninstall on the client.

    http://www.butsch.ch/…/KB-2464588-Office-2003-reports-corrupt-while-opening-newer-File-Version.aspx

  16. David Geis says:

    Mike, thanks for posting the scripted uninstall instructions — very helpful.  I'm sure what you posted was enough for someone who actually knows what they are doing, but I had to make some modfications to get it to work for me.  

    On the msiexec.command, the /package has to exactly match the package code for your installation of Office.  Mine did not match the one on the blog. You can find GUID in regedit under HKLMsoftwaremicrosoftwindowscurrentversionuninstall (just search for Office).  

    Then, for whatever reason, I was unable to get the /uninstall (package code) version to work.  It would always complain that the patch package could not be opened and to verify that it actually exists.  

    I had more success in providing the path to the MSP.  But my MSP was not in a directory c:edv as shown in the example.  I'm not sure what c:edv is or why the MSP would be found there, but it can be found inside the CAB file as Mike  mentioned.  Once I extracted that and referred to the path where I stored it, everything was fine.

    You can find the MSP file here:

    "c:WINDOWSSoftwareDistributionDownload656f1c6b07c17e834ebe6336235d9ef6POWERPNT.CAB"

  17. Ethan Russo says:

    This is far too complicated. My system works at present, and I'm not going to risk rendering it inoperative again using a procedure I can't follow. Microsoft has to provide a patch that works. Until then, the evil PowerPoint and Excel patches will remain uninstalled on my machine.

  18. Baffled says:

    I can't believe that once this problem was discovered that the hotfix wasn't over written.  I came to church this morning, only to find this problem.  I don't have the office cd with me, so powerpoint is not going to be used today!  

    Thanks Microsoft! (sarcasm if you can't tell!)

  19. martyn says:

    Its just a DOS attack by Microsoft to force everyone to upgrade.

  20. Ashford says:

    We only have 2003.  PowerPoint freezes instantly, so making a change and saving it isn't an option.  When is there going to be a fix for this?  We are a few weeks away from an annual user group conference and have already lost hours trying to fix this.

  21. Bart says:

    Agree it's painful. Ashford it sounds like you have the same issue as I did where, even after removing the patch, files remained corrupted and unusable. To work around this select all the slides > copy > create a new presentation > paste the slides in > click in a slide and choose to retain source formating and you should have a new usable file.

  22. Christina - IT says:

    I have now worked on this issue for about 4 hours. Some computers have the update installed and was able to uninstall. The other computers however, not able to find the update. I cannot fathom going through each PPT slide (dating back to 2008) and fixing each one that is corrupt. ON the computers that do show the update I cant even uninstall them!!!

    I do not care for any of the workarounds – you make it sound like it might be ONE file that needs to be fixed.

  23. Rigracer says:

    Had a nightmare day as a result of 22 updates downloaded which included KB2464588 which we know corrupts existing 2003 Powerpoint presentations. I tried to uninstall it but got an error message telling me SKU111.CAB could not be found despite loading the original office CD on prompt. After numerous attempts I copied SKU111.CAB as a desktop file and low and behold it works. KB2464588 has gone and my presentations now open as normal. Yippee for that – was driving me nuts.

  24. MartynW says:

    Install OpenOffice, that fixed it for me… either save as powerpoint 2003 file type or just edit it in OpenOffice, optionally deinstall MS Office and save on future upgrade costs.

  25. joseph says:

    I was able to turn things around by Uninstalling the Update and did not have to use my disk so it was relatively painless.  But until I figured out the issue was the Update from yesterday (that I callously approved) I was in pain as I'm on deadline with a project.

    To Martyn's point re: MS motive – I see lots of "fixes" but nobody other than he asking "why'd they do that – other than to force one to upgrade?".  The workarounds are: "open with 07 or 10".  No transparency there.  My PPT works fine now that I took out the update and I will be vigilant to not accept it moving fwd.  I've also sent my story and some links on to as many as I can.  As for notifying MS – they know exactly what they are doing so that's a waste of time.

  26. Lynn Munger says:

    What about Powerpoint XP? The same thing happened to me after this update! PPT freezes after about 20 keystrokes after opening a .ppt file in PPT XP. I tried uninstalling the 2 update files that I thought were responsible, but that didn't help and even gave me the blue screen of death twice. I can't even do any work now for my clients who want their files done in XP. Do they really do this so we'll upgrade? Well, I just bought 2010 because 2007 sucks so bad. But I need to run several different older version since my clients are still using them. They make me want to kill myself. Can't take all this trouble. I had my updates set on notify me, too and they forced themselves on me.

  27. Eric Hunter says:

    I too had this problem – everything on the slide bar the text in the body of the slide and the pictures/ diagrams had gone completely white. Couldn't even see the slide toitles in the placeholders at the top of each slide. However found the fauilty patch and uninstalled it – and everything's viewable perfectly again! Don't SEEM to have lost any slide designs, etc – which were being saved on a Dropbox and shared with colleagues. What a relief too – in the middle of weeks of presentations!

  28. RM@N says:

    Is there a work around so that the update won't get intalled again? I just had to uninstall the update again.

  29. John Vinson says:

    I was able to get the update uninstalled… but I had to copy two files (X2561401.cab and x3561401.cab) from the Office installation DVD into a MSOCache subfolder before it would uninstall.

    And I presume that leaves my wife's PC vulnerable to whatever security threat this was to patch.

    Hope this all gets resolved, SOON.

  30. Rat50 says:

    PPT 2003 hot fix attempted this morning.  Not easy to use…and problem persists.  For an economy built on making Power Point presentations to everyone from students to senior management…this is a major problem.  Get it fixed…and make it easy for users…who are now being abused!

  31. Chip says:

    I installed this hotfix this morning on two XP/Office2003 computers. The problem still remains on one of the computers. I am not sure MS has fixed the issue of not. Will do more testing!

    This has been a real PAIN. MS should have never released a patch with the known issues we have seen with this MS11-022 patch. An yes, they could have made the hotfix a little easier to use. Come on MS, get it together.

  32. Scott says:

    After uninstalling KB2464588 I went into Microsoft Update and unchecked this update and checked the Do Not Remind Me option so that the update is not automatically applied again through Automatic Updates.

  33. Keith says:

    The Hotfix worked on 3 PCs here.

  34. Ian says:

    Fix worked on one WIN XP desktop computer, but not on the other desktop.  Did not work on my WIN 7 laptop.

    More work required and better testing.

  35. oldmfors says:

    I have the update installed on probably just 100 computers. Have now tested this hotfix on 2 computers and it didnt help at all…

    What seems to work is to open a new blank powerpoint presentation and when copy all the data from the corrupt file into this new and save. But for some reason it will drop all formatting, this could be configured aftwerwards though. It didnt work to just copy the file and open the copy.

  36. Kingsley Newman says:

    Have tried the KB2543241 Update on three Windows XP PC's running Powerpoint 2003.  No Joy, same problem!!!

  37. Kingsley Newman says:

    Update —

    Thanks to the above suggestion by Mattias of copying the data from the original presentation into a new one i am able to get somewhere.

    Does this mean though that all my old presentations would have to be treated in the same way?

    That is a lot of work!!!!!

    My users cannot understand how Microsoft have gaffed in such a big way, then produced a fix which doesn't fix the problem..

  38. oldmfors says:

    For us, it seems to have connection to the .pot file. All presentations made with the blank.pot template seems to be affected. Other users who has used another startup template is not affected for us.

    For us its just the last presentation which the user worked with which is affected. Still, if the KB2464588 isnt uninstalled, all presentations created with that template (blank.pot) will be affected. If you uninstall KB2464588 you can when open older files even if they was created from that template.

  39. Matt H says:

    We just had our first reports of the "corrupt file error" yesterday after applying KB2464588 on Thursday.  I have only tested on XP…seemed to work, able to open the original file.  We have NOT uninstalled KB2454588, FWIW.  I do not know about the "freezing issue" though.

  40. Matt H says:

    I should have mentioned that I applied the hotfix without uninstalling the security update…sorry about that!

  41. Aaron K says:

    Had two customers experiencing this issue (WinXP SP3, PPT 2003 SP3).  Requested and downloaded kb2543241, and applied after all applications were closed.  Once rebooted all was well.

  42. Mark E says:

    A manually downloadable hot fix is just great for one PC or a few PCs, but what about enterprise class customers?  I am supposed to go out, buy a 3rd party deployment tool to install this on over 200 PCs?  Have of which are not conected via my WAN, rendering a newly purchased deployment tool useless anyway?  

    Microsoft – you caused the problem, you fix it properly.  This hotfix is an unacceptable solution – re-release a proper patch available through WSUS please.

  43. Aaron A. says:

    We have applied the hotfix and found it fixed the corruption issue.  We are still seeing a number of users reporting that PowerPoint 2003 frequently enters a not responding state since deployment of MS11-022.  This problem has continued after the deployment of the hotfix.

  44. Mel says:

    We are now experiencing the same error in 2007 and 2010 for some files, could update KB2535818 be causing this? Doesn't seem as frequent as 2003 problem (which hotfix sorted) but it wasn't that frequent when it first started in 2003 either….

  45. Manni says:

    T.Y. to everyone for the solution. Question – If I install the hotfix patch for 2003, will my 2003 .ppt files become uncorrupted or do I have to redo my 2003 .ppt slides again?

    Very frustrated with Microsoft.  Why not to install update patches immediately?  Can we bill MS for the time wasted in trying to fix this problem