Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

MS12-060: Description of the security update for 2007 Office system: August 14, 2012


Introduction

Microsoft has released the security bulletin MS12-060. You can view the complete security bulletin by going to one of the following Microsoft websites:

↑ Back to the top


How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

↑ Back to the top


More information about this security update

↑ Back to the top


Known issues with this security update

  • Windows Common Control-based embedded ActiveX controls may fail to load within pre-existing Office documents, within third-party add-ins, and when you insert new controls in developer mode.







    Recommended resolution

    A fix is now available for download that installs the control and also fixes the registration of the control. We recommend that you install this fix to resolve the issue. You can download the fix here.

    Note You do not have to install security update 2687441 before you install this fix in order to resolve your issue. 

    Note If you do not install the fix and choose other resolution, you may experience the same issue when you install an update for the Office which is released after the MS12-060.

    Additional resolution

    If you prefer, you can use the Fix it solution to have us fix this problem for you. To do this, go to the "Fix it for me" section.


    Workaround

    To work around this problem, you can use Registry Editor to delete the related registry entry. Then, use the Regsvr32 command to register the Mscomctl.ocx file. You can also create a batch file to automate this.

    Manually delete the related registry entry

    ImportantThis section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
    322756 How to back up and restore the registry in Windows


    To delete this registry entry, follow these steps:
     
    1. Click Start, click Run, type regedit in the Open box, and then click OK.
    2. Locate and then click the following subkey in the registry:
       
      HKEY_CLASSES_ROOT\TypeLib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.0
    3. On the Edit menu, click Delete, and then click Yes.
    4. Exit Registry Editor, and then restart the computer.


    Manually register the Mscomctl.ocx file


    Note You must run the commands from commands at an elevated command prompt with administrator permissions. To do this, follow these steps:


     
    1. Click Start, type cmd.
    2. Right-click the cmd icon, and then click Run as Administrator.
    3. Depending on your operating system, type the either of the following commands, and then press Enter:
      • For 64-bit operating systems, type the following:
        Regsvr32 "C:\Windows\SysWOW64\MSCOMCTL.OCX"
      • For 32-bit operating systems, type the following:
        Regsvr32 "C:\Windows\System32\MSCOMCTL.OCX"
    Create a batch file to delete the related registry entry and register the Mscomctl.ocx file

    You can create a batch file to delete the registry entry and register the Mscomctl.ocx file. To create the batch file, copy the following text to a text file, and then save the text file by using a ".bat" file name extension. (The following example detects whether the operating system is 32-bit or 64-bit, and then it runs the appropriate command.)


     
    reg delete hkcr\typelib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.0 /f
    if exist %systemroot%\SysWOW64\cscript.exe goto 64 
    %systemroot%\system32\regsvr32 /u mscomctl.ocx
    %systemroot%\system32\regsvr32 mscomctl.ocx
    exit
    
    :64 
    %systemroot%\sysWOW64\regsvr32 /u mscomctl.ocx
    %systemroot%\sysWOW64\regsvr32 mscomctl.ocx
    exit
    
    To run the regsvr32 commands silently, add a /s switch to each of the regsvr32 commands in the previous example. For example:
    %systemroot%\system32\regsvr32 /u mscomctl.ocx /s
    

    Note You must run the batch file as an administrator:

     
    • To do this in Windows Vista, Windows Server 2008, Windows 7, or Windows Server 2008 R2, right-click the batch file, and then click Run as administrator.
    • To do this in Windows XP or Windows Server 2003, press and hold the Shift key, right-click the batch file, and then click Run as administrator.

    For more information about how to start a program as an administrator, go to the following Microsoft webpage:
    For more information about how to register an ActiveX control, click the following article number to view the article in the Microsoft Knowledge Base:
    2746232 How to register an ActiveX control manually (.ocx)

    Fix it for me


    The fixit solution described in this section is not intended to be a replacement for any security update. We recommend that you always install the latest security updates. However, we offer this fixit solution as a workaround option for some scenarios.


    To enable or disable this fixit solution, click the Fix it button or link under the Enable heading. Click Run in the File Download dialog box, and then follow the steps in the Fix it wizard.
    Enable
     
    Notes
    • This wizard may be in English only. However, the automatic fix also works for other language versions of Windows.
    • If you are not on the computer that has the problem, you can save the automatic fix to a flash drive or to a CD, and then you can run it on the computer that has the problem.
  • Microsoft Update or Windows Update may offer this update even though you do not have the 2007 Microsoft Office suite installed. For more information about this issue, click the following article number to view the article in the Microsoft Knowledge Base:
    830335 Microsoft Update and Windows Update offer updates for Office programs that you do not have installed

↑ Back to the top


Prerequisites to apply this security update

To apply this security update, you must have Service Pack 2 or Service Pack 3 for the 2007 Microsoft Office suite installed on the computer.

For more information about how to obtain the service pack for the 2007 Microsoft Office suite, click the following article number to view the article in the Microsoft Knowledge Base:
949585 How to obtain the latest service pack for the 2007 Office suite

↑ Back to the top


Command-line switches for this update

For information about the various command-line switches that are supported by this update, click the following article number to view the article in the Microsoft Knowledge Base:
262841 Command-line switches for Windows software update packages

↑ Back to the top


Restart information

You may have to restart the computer after you install this security update.

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update. For more information about the reasons why you may be prompted to restart, click the following article number to view the article in the Microsoft Knowledge Base:
887012 Why you may be prompted to restart your computer after you install a security update on a Windows-based computer

↑ Back to the top


Removal information

This update cannot be removed.

↑ Back to the top


Update replacement information

This update replaces the following update:
2598041 MS12-027: Description of the security update for 2007 Microsoft Office system: April 10, 2012

↑ Back to the top


File information

The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
For all supported x86-based versions of systems
File nameFile versionFile sizeDateTime
Mscomctl.ocx6.01.98341,070,15207-Jun-201203:59

↑ Back to the top



Applies to

This article applies to the following:
  • 2007 Microsoft Office Suite Service Pack 3
  • 2007 Microsoft Office Suite Service Pack 2

↑ Back to the top


Keywords: kbsecvulnerability, kbsecreview, kbsecbulletin, kbmustloc, kblangall, kbfix, kbexpertiseinter, kbbug, atdownload, kb, kbsecurity

↑ Back to the top

Article Info
Article ID : 2687441
Revision : 3
Created on : 5/21/2020
Published on : 5/21/2020
Exists online : False
Views : 530