Re: MS09-010 960477 KB923561 FAILED on all Servers.

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

JustJeff wrote:
Trying to install on Windows 2003 Servers SP2 up to date patches. All new patches install except above. Work around appears to be

This tries to modify C:\Program Files\Windows NT\Accessories\mswrd8.wpc. This file is set to read/execute only for the "everyone" group. Because of this, it causes the patch to fail installation. I have tested and confirmed that changing the permissions for the file to read/write will allow the patch to apply. I then changed it back to read/execute.

Since this will require a lot of administrative effort, I wrote a quick script to change the permissions on this file to RW, and then another to change it back to read/execute.

However - Why should I need to do this? Should it not just install?
Warning Undo this workaround before installing this security update.

In order to apply the access list, run the following commands from the command prompt. Note that some of these may result in an error message, this is expected.

echo y| cacls "%ProgramFiles%\Windows NT\Accessories\mswrd6.wpc" /E /P everyone:N
echo y| cacls "%ProgramFiles%\Common Files\Microsoft Shared\TextConv\mswrd632.wpc" /E /P everyone:N

echo y| cacls "%ProgramFiles%\Common Files\Microsoft Shared\TextConv\mswrd632.cnv" /E /P everyone:N
echo y| cacls "%ProgramFiles(x86)%\Common Files\Microsoft Shared\TextConv\mswrd632.wpc" /E /P everyone:N
echo y| cacls "%ProgramFiles(x86)%\Common Files\Microsoft Shared\TextConv\mswrd632.cnv" /E /P everyone:N
echo y| cacls "%ProgramFiles%\Windows NT\Accessories\mswrd664.wpc" /E /P everyone:N
echo y| cacls "%ProgramFiles(x86)%\Windows NT\Accessories\mswrd6.wpc" /E /P everyone:N

Impact of workaround. Upon implementing the workaround, the user will no longer be able to convert Word 6 documents to WordPad RTF or Word 2003 documents. Microsoft Office Word will return an error saying, "The file appears to be corrupted."

How to undo the workaround.

echo y| cacls "%ProgramFiles%\Windows NT\Accessories\mswrd6.wpc" /E /R everyone
echo y| cacls "%ProgramFiles%\Common Files\Microsoft Shared\TextConv\mswrd632.wpc" /E /R everyone
echo y| cacls "%ProgramFiles%\Common Files\Microsoft Shared\TextConv\mswrd632.cnv" /E /R everyone

echo y| cacls "%ProgramFiles(x86)%\Common Files\Microsoft Shared\TextConv\mswrd632.wpc" /E /R everyone
echo y| cacls "%ProgramFiles(x86)%\Common Files\Microsoft Shared\TextConv\mswrd632.cnv" /E /R everyone

echo y| cacls "%ProgramFiles%\Windows NT\Accessories\mswrd664.wpc" /E /R everyone
echo y| cacls "%ProgramFiles(x86)%\Windows NT\Accessories\mswrd6.wpc" /E /R everyone



You did the mitigtion, you have to undo it first.
.

Relevant Pages

  • Re: Perl Question on AIX 5.2: Cant locate loadable object for module GD in @INC
    ... the INSTALL file for gd-2.0.12 suggests these commands: ... Target "check" is up to date. ... If you ever happen to want to link against installed libraries ... 'gd_gd2.c' || echo './'`gd_gd2.c ...
    (comp.unix.aix)
  • Re: Windows Installer runs everytime I open an Office program or f
    ... followed these steps to a tee with the exception of B2TR. ... WICU to no avail even after an uninstall. ... Echo http://www.echosvoice.com ... Installer tries to install and configure Office ...
    (microsoft.public.office.misc)
  • Re: MS09-010 960477 KB923561 FAILED on all Servers.
    ... Probably someone made a mistake either when applying the mitigation or removing it and accidentally zapped the Administrator permissions which should have remained unchanged. ... Warning Undo this workaround before installing this security update. ... echo y| cacls "%ProgramFiles%\Common Files\Microsoft ...
    (microsoft.public.windowsupdate)
  • Re: Lenny wont install on an old Pentium that used to run Etch.
    ... It does not bother to backup anything that's on a Debian install CD. ... echo failed last time. ... # This script creates afio archives in my $/afio directory. ... # ?????2001 sbk. ...
    (Debian-User)
  • RE: switching discs during install
    ... just so much hot air because cd's install media belong to the legacy world. ... FreeBSD needs to come of age in the 21st century and be changed to install ... You could even use a USB flash stick as ... echo " " ...
    (freebsd-questions)