How to programmatically install the PowerPoint 2003 hotfix related to KB2543241 and KB2464588

If you have installed the KB2464588 update for Microsoft PowerPoint 2003, which is related to Microsoft Security Bulletin MS11-022, you may be aware of/experiencing the following known issues:

When you open presentations that contain layouts with background images in PowerPoint 2003, an error may occur. When the error occurs, you receive a message that states that some contents (text, images, or objects) have corrupted. You can determine what content has been lost by viewing the layout, but not by viewing the slide content. Items that were removed will display a blank box or a box that contains “cleansed.”

The KB2543241 hotfix was created to alleviate these issues. The following steps can be used to install the KB2543241 hotfix in a manner that is conducive to an enterprise environment (i.e., via command line, silently, and requiring no user interaction):

1) Extract the MSP file from the KB2543241 executable, by using a command line similar to the following (“C:\KB2543241” is an example of a path where files could be extracted to):

<path>\office2003-KB2543241-ENU.exe /C /T:C:\KB2543241 /Q

 2) Attempt to silently install the KB2543241 MSP file, generate a verbose installation log, and suppress reboots using a command line similar to the following (change “/QN” to “/QB” to display only a basic progress indicator):

 %windir%\System32\msiexec.exe /P C:\KB2543241\POWERPNT.msp REBOOT=ReallySuppress /L*V C:\KB2543241\KB2543241.log /QN

 3) Check the end of the verbose log file (i.e., KB2543241.log) for a return code. A value of zero indicates success with no further action required. A return code of 3010 also indicates a successful installation of the MSP file, but a reboot is required to complete the update process.

4) See for additional info on Windows Installer return/error codes.

5) Machines with Windows Installer 4.x and later (Windows 7 ships with Installer 5.x) contain functionality provided by the MSI Restart Manager. The design of the MSI Restart Manager is to reduce required system restarts caused by required files being in use during a maintenance mode or update process.

6) With the MSI Restart Manager, if a file that is to be updated is held in use by another process or application (i.e., PowerPnt.exe), that application is restarted in order to allow for an “on the fly” update.

7) This has the potential to cause issues with open Office applications, which may be unexpectedly restarted. To prevent applications from being restarted, a command line similar to the following can be used:

 %windir%\System32\msiexec.exe /P C:\KB2543241\POWERPNT.msp REBOOT=ReallySuppress MSIRESTARTMANAGERCONTROL=Disable /L*V C:\KB2543241\KB2543241.log /QN

 8) It is important to note that if the MSI Restart Manager is disabled, a reboot is suppressed, and Office files to be updated are in use, changes to files will not occur until after the machine is rebooted (this would be a scenario where the log file ends with a return code of 3010).

9) See the following articles for additional info on the MSI Restart Manager:

MSI Restart Manager – How it relates to Office updates and application restarts

Using Windows Installer with Restart Manager


10) For further information on the KB2543241 and KB2464588 updates & hotfixes, see the following blog posts, articles, and bulletin:

Office Sustained Engineering and Release Team Blog post, “Issues after installing PowerPoint 2003 update KB2464588”

KB2543241 Description of the PowerPoint 2003 hotfix package

Office Sustained Engineering and Release Team Blog post, “April 2011 Office Security Update Release”

Microsoft Security Bulletin MS11-022 – Important
Vulnerabilities in Microsoft PowerPoint Could Allow Remote Code Execution (2489283)

KB2464588 MS11-022: Description of the security update for PowerPoint 2003: April 12, 2011

Comments (0)