MS12-060: Description of the security update for 2007 Office system: Aug...

Page 1 of 5

Find it myself Ask the community

Select the product you need help with

Windows

Get live help

Internet Explorer

Office

Surface

Xbox

Skype

Windows Phone

More products

MS12-060: Description of the security update for 2007 Office system: August 14, 2012
Article ID: 2687441

View products that this article applies to.

Applies to
This article applies to the following: 2007 Microsoft Office Suite Service Pack 3 2007 Microsoft Office Suite Service Pack 2

Introduction
Microsoft has released the security bulletin MS12-060. You can view the complete security bulletin by going to one of the following Microsoft websites: Home users: http://www.microsoft.com/security/pc-security/bulletins/201208.aspx(http://www.microsoft.com/security/pcsecurity/bulletins/201208.aspx)

IT professionals: http://technet.microsoft.com/security/bulletin/MS12-060(http://technet.microsoft.com/security/bulletin/MS12-060)

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update(http://support.microsoft.com/ph/6527) Security solutions for IT professionals: TechNet Security Troubleshooting and Support

http://support.microsoft.com/kb/2687441

11/20/2012

MS12-060: Description of the security update for 2007 Office system: Aug... Page 2 of 5

(http://technet.microsoft.com/security/bb980617.aspx)

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center
(http://support.microsoft.com/contactus/cu_sc_virsec_master)

Local support according to your country: International Support(http://support.microsoft.com/common/international.aspx)

More information about this security update

Known issues with this security update
Windows Common Control-based embedded ActiveX controls may fail to load within pre-existing Office documents, within third-party add-ins, and when you insert new controls in developer mode. Recommended resolution A fix is now available for download that installs the control and also fixes the registration of the control. We recommend that you install this fix to resolve the issue. You can download the fix here
(http://download.microsoft.com/download/2/D/8/2D842B97-0038-4055-836F-F869B6D42703/mscomctlocx2007-kb2687493-fullfile-x86glb.exe) .

NoteYou do not have to install security update 2687441 before you install this fix in order to resolve your issue. Additional resolution If you prefer, you can use the Fix it solution to have us fix this problem for you. To do this, go to the "Fix it for me" section. Workaround To work around this problem, you can use Registry Editor to delete the related registry entry. Then, use the Regsvr32 command to register the Mscomctl.ocx file. You can also create a batch file to automate this. Manually delete the related registry entry Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base: 322756(http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows

To delete this registry entry, follow these steps: 1. Click Start, click Run, type regedit in the Open box, and then click OK. 2. Locate and then click the following subkey in the registry: HKEY_CLASSES_ROOT\TypeLib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.0 3. On the Edit menu, click Delete, and then click Yes. 4. Exit Registry Editor, and then restart the computer.

Manually register the Mscomctl.ocx file Note You must run the commands from commands at an elevated command prompt with administrator permissions. To do this, follow these steps:

http://support.microsoft.com/kb/2687441

11/20/2012

MS12-060: Description of the security update for 2007 Office system: Aug... Page 3 of 5

1. Click Start, type cmd. 2. Right-click the cmd icon, and then click Run as Administrator. 3. Depending on your operating system, type the either of the following commands, and then press Enter: For 64-bit operating systems, type the following: Regsvr32 "C:\Windows\SysWOW64\MSCOMCTL.OCX" For 32-bit operating systems, type the following: Regsvr32 "C:\Windows\System32\MSCOMCTL.OCX" Create a batch file to delete the related registry entry and register the Mscomctl.ocx file You can create a batch file to delete the registry entry and register the Mscomctl.ocx file. To create the batch file, copy the following text to a text file, and then save the text file by using a ".bat" file name extension. (The following example detects whether the operating system is 32-bit or 64-bit, and then it runs the appropriate command.) reg delete hkcr\typelib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.0 /f if exist %systemroot%\SysWOW64\cscript.exe goto 64 %systemroot%\system32\regsvr32 /u mscomctl.ocx %systemroot%\system32\regsvr32 mscomctl.ocx exit :64 %systemroot%\sysWOW64\regsvr32 /u mscomctl.ocx %systemroot%\sysWOW64\regsvr32 mscomctl.ocx exit

To run the regsvr32 commands silently, add a /s switch to each of the regsvr32 commands in the previous example. For example: %systemroot%\system32\regsvr32 /u mscomctl.ocx /s

Note You must run the batch file as an administrator: To do this in Windows Vista, Windows Server 2008, Windows 7, or Windows Server 2008 R2, right-click the batch file, and then click Run as administrator. To do this in Windows XP or Windows Server 2003, press and hold the Shift key, right-click the batch file, and then click Run as administrator.

For more information about how to start a program as an administrator, go to the following Microsoft webpage: http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/windows_security_runa s.mspx?mfr=true
(http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/windows_security_runas.mspx?mfr=true )

For more information about how to register an ActiveX control, click the following article number to view the article in the Microsoft Knowledge Base: 2746232(http://support.microsoft.com/kb/2746232) How to register an ActiveX control manually (.ocx)

Fix it for me
The fixit solution described in this section is not intended to be a replacement for any security update. We recommend that you always install the latest security updates. However, we offer this fixit solution as a workaround option for some scenarios. To enable or disable this fixit solution, click the Fix it button or link under the Enable heading. Click Run in the File Download dialog box, and then follow the steps in the Fix it wizard.

http://support.microsoft.com/kb/2687441

11/20/2012

MS12-060: Description of the security update for 2007 Office system: Aug... Page 4 of 5

Enable

Fix this problem Microsoft Fix it 50930 Notes This wizard may be in English only. However, the automatic fix also works for other language versions of Windows. If you are not on the computer that has the problem, you can save the automatic fix to a flash drive or to a CD, and then you can run it on the computer that has the problem. Microsoft Update or Windows Update may offer this update even though you do not have the 2007 Microsoft Office suite installed. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base: 830335(http://support.microsoft.com/kb/830335/ ) Microsoft Update and Windows Update offer updates for Office programs that you do not have installed

Prerequisites to apply this security update

To apply this security update, you must have Service Pack 2 or Service Pack 3 for the 2007 Microsoft Office suite installed on the computer. For more information about how to obtain the service pack for the 2007 Microsoft Office suite, click the following article number to view the article in the Microsoft Knowledge Base: 949585(http://support.microsoft.com/kb/949585/ ) How to obtain the latest service pack for the 2007 Office suite

Command-line switches for this update

For information about the various command-line switches that are supported by this update, click the following article number to view the article in the Microsoft Knowledge Base: 262841(http://support.microsoft.com/kb/262841/ ) Command-line switches for Windows software update packages

Restart information
You may have to restart the computer after you install this security update. In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer. To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update. For more information about the reasons why you may be prompted to restart, click the following article number to view the article in the Microsoft Knowledge Base: 887012(http://support.microsoft.com/kb/887012/ ) Why you may be prompted to restart your computer after you install a security update on a Windows-based computer

Removal information
This update cannot be removed.

Update replacement information

This update replaces the following update:

http://support.microsoft.com/kb/2687441

11/20/2012

MS12-060: Description of the security update for 2007 Office system: Aug... Page 5 of 5

2598041(http://support.microsoft.com/kb/2598041/ ) MS12-027: Description of the security update for 2007 Microsoft Office system: April 10, 2012

File information
The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files. For all supported x86-based versions of systems File name File version File size Date Time

Mscomctl.ocx 6.01.9834

1,070,152 07-Jun-2012 03:59

Properties
Article ID: 2687441 - Last Review: September 25, 2012 - Revision: 4.0 Keywords: kbsecvulnerability kbsecurity kbsecbulletin kbfix kbexpertiseinter kbbug atdownload KB2687441

Give Feedback

Back to the top

http://support.microsoft.com/kb/2687441

11/20/2012