DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 2597986 - Last Review: May 28, 2013 - Revision: 7.0


Applies to

This article applies to the following:
  • Microsoft Office 2010 Service Pack 1

On This Page

Introduction

Microsoft has released the security bulletin MS12-060. You can view the complete security bulletin by going to one of the following Microsoft websites:

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update (http://support.microsoft.com/ph/6527)

Security solutions for IT professionals: TechNet Security Troubleshooting and Support (http://technet.microsoft.com/security/bb980617.aspx)

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center (http://support.microsoft.com/contactus/cu_sc_virsec_master)

Local support according to your country: International Support (http://support.microsoft.com/common/international.aspx)

Known issues with this security update

Windows Common Control-based embedded ActiveX controls may fail to load within pre-existing Office documents, within third-party add-ins, and when you insert new controls in developer mode.

Recommended resolution

A fix is now available for download that installs the control and also fixes the registration of the control. We recommend that you install this fix to resolve the issue. You can download the fix here (http://download.microsoft.com/download/9/9/7/99775BB8-1759-4B21-8CF0-247DAEC127B4/mscomctlocx2010-kb2687503-fullfile-x86-glb.exe) .

Note You do not have to install security update 2597986 before you install this fix in order to resolve the issue.

Note If you do not install the fix and choose other resolution, you may experience the same issue when you install an update for the Office which is released after the MS12-060.

Additional resolution

If you prefer, you can use the Fix it solution to have us fix this problem for you. To do this, go to the "Fix it for me" section.

Workaround

To work around this problem, you can use Registry Editor to delete the related registry entry. Then, use the Regsvr32 command to register the Mscomctl.ocx file. You can also create a batch file to automate this.

Manually delete the related registry entry

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756  (http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows


To delete this registry entry, follow these steps:
  1. Click Start, click Run, type regedit in the Open box, and then click OK.
  2. Locate and then click the following subkey in the registry:
    HKEY_CLASSES_ROOT\TypeLib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.0
  3. On the Edit menu, click Delete, and then click Yes.
  4. Exit Registry Editor, and then restart the computer.
Manually register the Mscomctl.ocx file

Note You must run the commands from commands at an elevated command prompt with administrator permissions. To do this, follow these steps:
  1. Click Start, type cmd.
  2. Right-click the cmd icon, and then click Run as Administrator.
  3. Depending on your operating system, type the either of the following commands, and then press Enter:
    • For 64-bit operating systems, type the following:
      Regsvr32 "C:\Windows\SysWOW64\MSCOMCTL.OCX"
    • For 32-bit operating systems, type the following:
      Regsvr32 "C:\Windows\System32\MSCOMCTL.OCX"
Create a batch file to delete the related registry entry and register the Mscomctl.ocx file

You can create a batch file to delete the registry entry and register the Mscomctl.ocx file. To create the batch file, copy the following text to a text file, and then save the text file by using a ".bat" file name extension. (The following example detects whether the operating system is 32-bit or 64-bit, and then it runs the appropriate command.)
reg delete hkcr\typelib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.0 /f
if exist %systemroot%\SysWOW64\cscript.exe goto 64
%systemroot%\system32\regsvr32 /u mscomctl.ocx
%systemroot%\system32\regsvr32 mscomctl.ocx
exit

:64
%systemroot%\sysWOW64\regsvr32 /u mscomctl.ocx
%systemroot%\sysWOW64\regsvr32 mscomctl.ocx
exit
To run the regsvr32 commands silently, add a /s switch to each of the regsvr32 commands in the previous example. For example:
%systemroot%\system32\regsvr32 /u mscomctl.ocx /s

Note You must run the batch file as an administrator:
  • To do this in Windows Vista, Windows Server 2008, Windows 7, or Windows Server 2008 R2, right-click the batch file, and then click Run as administrator.
  • To do this in Windows XP or Windows Server 2003, press and hold the Shift key, right-click the batch file, and then click Run as administrator.

For more information about how to start a program as an administrator, go to the following Microsoft webpage:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/windows_security_runas.mspx?mfr=true (http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/windows_security_runas.mspx?mfr=true )

For more information about how to register an ActiveX control, click the following article number to view the article in the Microsoft Knowledge Base:
2746232 (http://support.microsoft.com/kb/2746232) How to register an ActiveX control manually (.ocx)

Fix it for me

The Fix it solutions that are described in this section are not intended to be a replacement for any security update. We recommend that you always install the latest security updates. However, we offer these Fix it solutions as workaround options for some scenarios. 

Fix it solution for Windows 8-based systems

To enable this Fix it solution, click the Fix it button or link under the Enable heading, click Run in the File Download dialog box, and then follow the steps in the Fix it wizard.
Collapse this tableExpand this table
Enable
Fix this problem
Microsoft Fix it 20097
Notes
  • This wizard may be in English only. However, the automatic fix also works for other language versions of Windows.
  • If you are not on the computer that has the problem, you can save the automatic fix to a flash drive or a CD and then run the fix on the computer that has the problem. 

Fix it solution for supported versions of Windows earlier than Windows 8

To enable this Fix it solution, click the Fix it button or link under the Enable heading, click Run in the File Download dialog box, and then follow the steps in the Fix it wizard.
Collapse this tableExpand this table
Enable
Fix this problem
Microsoft Fix it 50930
Notes
  • This wizard may be in English only. However, the automatic fix also works for other language versions of Windows.
  • If you are not on the computer that has the problem, you can save the automatic fix to a flash drive or a CD and then run the fix on the computer that has the problem. 

More information about this security update

Prerequisites to apply this security update

To apply this security update, you must have Service Pack 1 for the Microsoft Office 2010 installed on the computer.

For more information about how to obtain the service pack, click the following article number to view the article in the Microsoft Knowledge Base:
2460049  (http://support.microsoft.com/kb/2460049/ ) Description of Office 2010 SP1

Command-line switches for this update

For information about the various command-line switches that are supported by this update, click the following article number to view the article in the Microsoft Knowledge Base:
262841  (http://support.microsoft.com/kb/262841/ ) Command-line switches for Windows software update packages

Restart information

You may have to restart the computer after you install this security update.

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update. For more information about the reasons why you may be prompted to restart, click the following article number to view the article in the Microsoft Knowledge Base:
887012  (http://support.microsoft.com/kb/887012/ ) Why you may be prompted to restart your computer after you install a security update on a Windows-based computer

Removal information

This update cannot be removed.

Update replacement information

This update replaces the following update:
2598039  (http://support.microsoft.com/kb/2598039/ ) MS12-027: Description of the security update for Office 2010: April 10, 2012

File information

The English (United States) version of this update installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
For all supported x86-based versions of Office 2010

Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Mscomctl.ocx6.01.98341,070,15206-Jun-201203:49


Keywords: 
kbsecvulnerability kbsecurity kbsecbulletin kbfix kbexpertiseinter kbbug atdownload KB2597986
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support