Revision of Microsoft Excel security update today

[robinb]

Microsoft Security Bulletin MS07-002
Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution
(927198)
Published: January 9, 2007 | Updated: January 18, 2007

http://www.microsoft.com/technet/security/bulletin/ms07-002.mspx

 

[robinb]

just so you know
This bulletin has been re-released to re-offer the security update to
customers with Microsoft Excel 2000.

robin

 

[Guest]

Nice job Robin, but I wonder if that would be better posted on the MS Office
NG?

http://www.microsoft.com/office/com...?dg=microsoft.public.excel.misc&lang=en&cr=US

Stu

 

[robinb]

well we post here when security updates are in and this technically is a
security update to excel
ribub

 

[Guest]

just so you know
This bulletin has been re-released to re-offer the security update to
customers with Microsoft Excel 2000.

Could someone give me a hand here please? I've never updated Microsoft
Office since it was first installed, so I went along to the Office update
site, which told me there were 9 updates needed. So I downloaded them, and it
started to install - then asked me to insert the Office cd - which I did.
Then it said it couldn't find what it wanted, and asked me to navigate to the
file data1.msi - and there it was, easy enough to find.

Then it said that data1.msi was not acceptable (or words to that effect),
and would I please find data1.msi instead. I kid you not. So I cancelled,
because there was nothing else to do.

I went through this farce 9 times and ended up with no updates installed,
and no way to install them.

Can someone tell me what to do, please?

 

[Donald Anadell]

Hi Alan,

Don't know if this will help you or not, I'm assuming you have Office 2000
since that's the only version that uses "data1.msi". From what I recall
that file should be on CD.

You might try this link to see if it applies to you:
http://office.microsoft.com/en-us/help/HA011185721033.aspx

If no joy there, try this link:
http://www.microsoft.com/office/community/en-us/default.mspx
Type data1.msi into the search box.

Good luck,

Donald Anadell

 

[Guest]

Don't know if this will help you or not, I'm assuming you have Office 2000
since that's the only version that uses "data1.msi". From what I recall
that file should be on CD.

Thanks for this Donald. It is indeed Offivce 2000, and data1.msi certainly
is on the CD - I can see it there, plain as anything. But the update
installation process won't accept it.

Following the second of your two links, although not solving the problem,
has given me a clue. It seems that the data1.msi file on one CD is not
necessarily the same as on another. I now remember that when Office 2000 was
installed on this computer last year (it was new then), it was installed by
the computer shop for me - and I think they didn't use my CD (which would
have been a couple of years old, then), but one of theirs.

I'm now guessing that their Office 2000 CD was a more recent version than
mine, and had a different version of data1.msi on it. And so the version on
my CD won't be the right one. So .... Either I need to ask the computer shop
to let me have a copy of data1.msi from one of their CDs (I don't know if
that's possible); or, I need to uninstall Office 2000 and reinstall it from
my CD, in order to get the right version of data1.msi on my hard drive.

Does this make sense to anyone?

 

[Tom Emmelot]

Hi Alan,

Use the "Windows Install Clean Up utility" to get rid of the old version
and do a install with your version, that way all the connections,
adressbook, E-mail are back again after the install.

Regards >*< TOM >*<

Alan D schreef:

 

[Donald Anadell]

Makes sense to me Alan. I jumped from Office 97 to Office For Windows
XP(2002), so I missed your version all together. If you can't get hold of
the Installation CD from the shop, you might try Tom's suggestion in oder to
get it re-installed using the CD you do have.

Donald Anadell

 

[Guest]

If you can't get hold of
the Installation CD from the shop, you might try Tom's suggestion in oder to
get it re-installed using the CD you do have.

Thanks Tom and Donald.

I'll try the shop first (easier option), and if that's no good, then I may
just put the Office updates on hold for a while (after all, I hadn't thought
of checking them for the last 15 months!). I don't want to risk messing
things up uninstalling/reinstalling/re-updating just at this moment, because
my need for Word to be problem-free is critical right now.

 

[Bill Sanderson MVP]

Before you go Tom's route, just see whether the update process offers you
the option of downloading the larger "full file" version.

According to Microsoft, the requirement for the original CD is not a
copy-protection mechanism, but simply a mechanism to decrease the size of
the update files. There are alternate files available that do not require
the original source CD, and if you have a broadband connection, they won't
be a problem to download.

See whether you can spot this option--or, if you can't, give me an example
or two of the patches needed and I'll see if I can point you in the right
direction.

--

 

[Guest]

There are alternate files available that do not require
the original source CD, and if you have a broadband connection, they won't
be a problem to download.

See whether you can spot this option--or, if you can't, give me an example
or two of the patches needed and I'll see if I can point you in the right
direction.

Thanks Bill. I ran one of the updates through again, but when it comes to
the data1.msi requirement, it gives me the option of browsing my CD (which is
no use, because it rejects the .msi that's on there) and hard drive (which is
no use either because the file isn't there). The only available option is to
cancel - and there's no opportunity to do anything else.

I've explored all over the Office update site, but can't find any reference
to the 'full file' you mention. So if you can point me towards a solution,
I'd be grateful.

Two of the updates I need are:
Security Update for Word 2000 (KB920910)
Security Update for Office 2000 (KB923274)

Cheers.

 

[Donald Anadell]

Hi Alan,

Here are the links to the full file downloads, take note that SP3 for Office
2000 has to be installed first if you don't have it installed already.

KB920910
http://www.microsoft.com/downloads/...49-4941-4DA5-A919-1DA388054E83&displaylang=en
KB923274
http://www.microsoft.com/downloads/...E4-7859-4C7E-898E-1CF05014885B&displaylang=en

However, both require that you have SP3 for Office 2000 installed first:
http://www.microsoft.com/downloads/...70-47d0-4306-9fa4-8e92d36332fe&DisplayLang=en

I don't know if these full file downloads will still be looking for
"data1.msi" when you try to install time or not.

Good luck,

Donald Anadell

 

[Guest]

Hi Alan,

Here are the links to the full file downloads, take note that SP3 for Office
2000 has to be installed first if you don't have it installed already.

Thanks Donald. Yes, I have SP3 already.
The good news is that, thanks to you, I now understand what's meant by the
'full files', and where and how to find them.
The bad news is that they still need the version of data1.msi that I don't
have, in order to install them, so I'm no further on, sadly.

Back to the shop.....

 

[Bill Sanderson MVP]

Sorry to hear that. I've seen similar issues on machines I work with--small
offices with multiple versions of Office 2000, and, in some cases,
particular apps came from different original Office 2000 CD's.

The full file update versions should avoid the issue, but I've seen them
fail as well. Definitely worth trying before removing and reinstalling,
though.

--