MS11-074: Description of the security update for Microsoft Office SharePoint Server 2007 (coreserver.msp): September 13, 2011

Article translations Article translations
Article ID: 2508964 - View products that this article applies to.
Expand all | Collapse all

On This Page

INTRODUCTION

Microsoft has released security bulletin MS11-074. To view the complete security bulletin, visit one of the following Microsoft websites: 

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

More information about this security update

Known issues with this security update

  • Known issue 1

    Symptom
    If the SharePoint Products and Technologies Configuration Wizard does not finish its task, SharePoint may be left in an inconsistent state. You may be unable to browse the Central Administration or SharePoint site, and you may receive one of the following error messages:

    Error message 1

    Server Error: http://go.microsoft.com/fwlink?LinkID=96177

    Error message 2

    HTTP 404 Not Found

    Error message 3

    Cannot connect to the configuration database

    Resolution

    For more information about how to resolve this issue, click the following article number to view the article in the Microsoft Knowledge Base:
    944267 How to troubleshoot common errors that occur when you run the SharePoint Products and Technologies Configuration Wizard on a computer that is running Windows SharePoint Services 3.0 or SharePoint Server 2007
  • Known issue 2

    Symptom

    Users are prompted for authentication when they try to browse a SharePoint site. Windows Server 2003 SP1 and Windows Server 2008 include a loopback check security feature that helps prevent reflection attacks on your computer. Therefore, authentication fails if the fully qualified domain (FQDN) or the custom host header that you use does not match the local computer name.

    Workaround

    There are two methods to work around this issue. Use one of the following methods, as appropriate for your situation.

    Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
    322756 How to back up and restore the registry in Windows

    Method 1: Specify host names (the preferred method for NTLM authentication)

    To specify the host names that are mapped to the loopback address and that can connect to websites on your computer, follow these steps:
    1. Set the DisableStrictNameChecking registry entry to 1. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:
      281308 Connecting to SMB share on a Windows 2000-based computer or a Windows Server 2003-based computer may not work with an alias name
    2. Click Start, click Run, type regedit, and then click OK.
    3. In Registry Editor, locate and then click the following registry key:
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
    4. Right-click MSV1_0, point to New, and then click Multi-String Value.
    5. Type BackConnectionHostNames, and then press ENTER.
    6. Right-click BackConnectionHostNames, and then click Modify.
    7. In the Value data box, type the host name or the host names for the sites that are on the local computer, and then click OK.
    8. Exit Registry Editor, and then restart the IISAdmin service.

    Method 2: Disable the loopback check (the less-recommended method)

    Warning This workaround may make a computer or a network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

    The second method is to disable the loopback check by setting the DisableLoopbackCheck registry entry.

    To set the DisableLoopbackCheck registry entry, follow these steps: 
    1. Set the DisableStrictNameChecking registry entry to 1. For more information about how to do this, click the following article number to view the article in the Microsoft Knowledge Base:
      281308 Connecting to SMB share on a Windows 2000-based computer or a Windows Server 2003-based computer may not work with an alias name
    2. Click Start, click Run, type regedit, and then click OK.
    3. In Registry Editor, locate and then click the following registry key:
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
    4. Right-click Lsa, point to New, and then click DWORD Value.
    5. Type DisableLoopbackCheck, and then press ENTER.
    6. Right-click DisableLoopbackCheck, and then click Modify.
    7. In the Value data box, type 1, and then click OK.
    8. Exit Registry Editor, and then restart your computer.
    For more information, click the following article number to view the article in the Microsoft Knowledge Base:
    926642 Error message when you try to access a server locally by using its FQDN or its CNAME alias after you install Windows Server 2003 Service Pack 1: "Access denied" or "No network provider accepted the given network path"
  • Known issue 3

    After you install this security update on a Windows Small Business Server-based computer that is running Office SharePoint Server 2007, in some scenarios, the SharePoint Companyweb and Central Administration pages may not be available. For more information about this issue and about how to resolve the issue, visit the following Microsoft TechNet webpage:
    http://blogs.technet.com/b/sbs/archive/2010/06/18/companyweb-and-sharepoint-central-admin-not-accessible-after-installing-kb983444.aspx
  • Known issue 4

    This security update may appear multiple times in the Installed Updates list after you install it. This occurs because this update is applied to multiple Office applications.
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
944267 How to troubleshoot common errors that occur when you run the SharePoint Products and Technologies Configuration Wizard on a computer that is running Windows SharePoint Services 3.0 or SharePoint Server 2007

Prerequisites to apply this security update

To install this security update, you must have 2007 Microsoft Office Servers Service Pack 2 installed on the computer.

For more information about how to obtain the service pack, click the following article number to view the article in the Microsoft Knowledge Base:
949583 How to obtain the latest service pack for the 2007 Office server products

Restart information

You may have to restart the computer after you install this security update.

Security update replacement information

This security update replaces the following security update:
2345212 MS10-072: Description of the security update for Office SharePoint Server 2007: October 12, 2010

File information

The English (United States) version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
For Microsoft Office SharePoint Server 2007, 32-bit edition
Collapse this tableExpand this table
File nameFile versionFile sizeDateTime
Admcmds.xmlNot Applicable2,21617-Apr-200908:51
Chtbrkr.dll12.0.6539.50006,116,69609-Jun-201008:48
Deprpt.asxNot Applicable15,59216-Sep-200920:21
Docxpageconverter.exe12.0.6550.5000997,78418-Nov-201010:22
Editprofilelayouts.aspxNot Applicable2,65921-May-200923:11
Expicker.jsNot Applicable3,26521-May-200923:11
Gmgfelem.xmlNot Applicable28814-Aug-200921:52
Gmigfeat.xmlNot Applicable47214-Aug-200921:52
Microsoft.office.server.dll12.0.6554.50002,897,79205-Feb-201103:56
Microsoft.office.server.dll12.0.6554.50002,897,79205-Feb-201103:56
Microsoft.sharepoint.publishing.dll12.0.6555.50003,676,05625-Feb-201103:07
Msscntrs.dll12.0.6529.500088,40803-Feb-201009:24
Mssdmn.exe12.0.6539.5000280,94409-Jun-201008:48
Mssearch.exe12.0.6539.5000156,01609-Jun-201008:48
Mssph.dll12.0.6548.5000702,28808-Oct-201005:13
Mssrch.dll12.0.6548.50002,065,74408-Oct-201005:13
Natlang6.dll6.0.6531.50002,616,20809-Mar-201016:33
Natlangnlsd0009.dll6.0.6519.500025,127,32806-Oct-200908:09
Notesph.dll12.0.6545.5000834,92812-Aug-201002:14
Offfiltx.dll2006.1200.6550.50001,117,07218-Nov-201009:50
Office.odf12.0.6527.50002,852,17612-Jan-201016:23
Osafehtm.dll12.0.6555.500099,69625-Feb-201102:56
Oss.searchresults.aspxNot Applicable8,44718-Sep-201007:32
Pbb1feat.xmlNot Applicable52621-Jul-201005:45
Pbb1fil.xmlNot Applicable8,67921-Jul-201005:45
Pbbfeat.xmlNot Applicable52021-Jul-201005:45
Pbbfil.xmlNot Applicable1,25721-Jul-201005:45
Pblyfeat.xmlNot Applicable58321-Jul-201005:45
Pkmexsph.dll12.0.6539.5000181,59209-Jun-201008:48
Portal.dll12.0.6549.50006,506,39203-Nov-201006:47
Portal.dll12.0.6549.50006,506,39203-Nov-201006:47
Profilesrp.sqlNot Applicable551,28809-Jun-201008:35
Profilup.sqlNot Applicable618,70309-Jun-201008:35
Provfil.xmlNot Applicable20,53821-Jul-201005:45
Provfile.xmlNot Applicable4,89821-Jul-201005:45
Pubrfeat.xmlNot Applicable95821-Jul-201005:45
Query9x.dll12.0.6510.500081,23217-Jun-200923:27
Reportcenterxmlonet.xmlNot Applicable25,16904-Nov-200922:36
Rteercs.asxNot Applicable11,41802-Feb-201107:37
Rteetbl.asxNot Applicable41,58302-Feb-201107:37
Rtepued.asxNot Applicable20,48402-Feb-201107:37
Sclonet.xmlNot Applicable32,39217-Apr-200908:51
Sctabslistallitems.aspxNot Applicable2,63908-Dec-200907:15
Scxmlonet.xmlNot Applicable54,69217-Apr-200910:16
Searchom.dll12.0.6554.50008,702,33602-Feb-201108:26
Searchom.dll12.0.6554.50008,702,33602-Feb-201108:26
Sharepointpub.dll12.0.6555.50003,676,05625-Feb-201103:07
Sharepointpub_gac.dll12.0.6555.50003,676,05625-Feb-201103:07
Sitesv3siteslistallitems.aspx12.0.32082,63908-Dec-200907:15
Sitesv3tabslistallitems.aspx12.0.32082,63908-Dec-200907:15
Sm.asxNot Applicable30,86908-Apr-201011:27
Sps.core.rsxNot Applicable85,63817-Apr-200910:18
Spscore.rsxNot Applicable103,75717-Apr-200917:50
Spscore.rsxNot Applicable116,42917-Apr-200917:50
Spscore.rsxNot Applicable92,89417-Apr-200917:49
Spscore.rsxNot Applicable83,67717-Apr-200917:25
Spscore.rsxNot Applicable90,79517-Apr-200917:49
Spscore.rsxNot Applicable89,10717-Apr-200917:49
Spscore.rsxNot Applicable92,53417-Apr-200917:49
Spscore.rsxNot Applicable121,22317-Apr-200917:49
Spscore.rsxNot Applicable85,63817-Apr-200910:18
Spscore.rsxNot Applicable89,73317-Apr-200917:49
Spscore.rsxNot Applicable94,47817-Apr-200917:49
Spscore.rsxNot Applicable97,26117-Apr-200917:49
Spscore.rsxNot Applicable94,20717-Apr-200917:41
Spscore.rsxNot Applicable92,76217-Apr-200917:41
Spscore.rsxNot Applicable97,79617-Apr-200917:40
Spscore.rsxNot Applicable92,05017-Apr-200917:40
Spscore.rsxNot Applicable91,32917-Apr-200917:37
Spscore.rsxNot Applicable87,92317-Apr-200917:38
Spscore.rsxNot Applicable93,35417-Apr-200917:38
Spscore.rsxNot Applicable90,66017-Apr-200917:37
Spscore.rsxNot Applicable91,75217-Apr-200917:37
Spscore.rsxNot Applicable114,43517-Apr-200917:36
Spscore.rsxNot Applicable90,27917-Apr-200917:48
Spscore.rsxNot Applicable92,65617-Apr-200917:37
Spscore.rsxNot Applicable89,02217-Apr-200917:29
Spscore.rsxNot Applicable128,14017-Apr-200917:29
Spscore.rsxNot Applicable90,96517-Apr-200917:28
Spscore.rsxNot Applicable112,11617-Apr-200917:28
Spscore.rsxNot Applicable89,55617-Apr-200917:36
Spscore.rsxNot Applicable87,32117-Apr-200917:48
Spscore.rsxNot Applicable91,35217-Apr-200917:38
Spscore.rsxNot Applicable91,52317-Apr-200917:38
Spscore.rsxNot Applicable127,69817-Apr-200917:49
Spscore.rsxNot Applicable83,67617-Apr-200917:25
Spscore.rsxNot Applicable92,24817-Apr-200917:37
Spscore.rsxNot Applicable90,82617-Apr-200917:36
Spscore.rsxNot Applicable92,45817-Apr-200917:49
Spsimpph.dll12.0.6529.5000327,00803-Feb-201009:24
Tquery.dll12.0.6554.50002,357,58402-Feb-201108:26
Upgrade.dll12.0.6539.5000771,99209-Jun-201008:58
Userprofilechangeservicewsdl.aspxNot Applicable19,95726-May-201011:29
For Microsoft Office SharePoint Server 2007, 64-bit edition
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Admcmds.xmlNot Applicable2,21617-Apr-200908:51Not Applicable
Chtbrkr.dll12.0.6539.50006,129,49609-Jun-201006:58Not Applicable
Deprpt.asxNot Applicable15,59216-Sep-200920:21Not Applicable
Docxpageconverter.exe12.0.6550.50001,622,93618-Nov-201010:40x64
Editprofilelayouts.aspxNot Applicable2,65921-May-200923:11Not Applicable
Expicker.jsNot Applicable3,26521-May-200923:11Not Applicable
Gmgfelem.xmlNot Applicable28814-Aug-200921:52Not Applicable
Gmigfeat.xmlNot Applicable47214-Aug-200921:52Not Applicable
Microsoft.office.server.dll12.0.6554.50002,897,79202-Feb-201107:53x86
Microsoft.office.server.dll12.0.6554.50002,897,79202-Feb-201107:53Not Applicable
Microsoft.sharepoint.publishing.dll12.0.6555.50003,676,05622-Feb-201120:09Not Applicable
Msscntrs.dll12.0.6529.5000437,08003-Feb-201008:46Not Applicable
Mssdmn.exe12.0.6539.5000797,04009-Jun-201006:58Not Applicable
Mssearch.exe12.0.6539.5000572,27209-Jun-201006:58Not Applicable
Mssph.dll12.0.6548.50001,957,71208-Oct-201005:16Not Applicable
Mssrch.dll12.0.6548.50004,761,42408-Oct-201005:16Not Applicable
Natlang6.dll6.0.6531.50003,985,80809-Mar-201016:25Not Applicable
Offfiltx.dll2006.1200.6550.50001,845,64818-Nov-201009:49Not Applicable
Osafehtm.dll12.0.6555.5000139,12022-Feb-201114:28x64
Oss.searchresults.aspxNot Applicable8,44718-Sep-201007:32Not Applicable
Pbb1feat.xmlNot Applicable52621-Jul-201005:45Not Applicable
Pbb1fil.xmlNot Applicable8,67921-Jul-201005:45Not Applicable
Pbbfeat.xmlNot Applicable52021-Jul-201005:45Not Applicable
Pbbfil.xmlNot Applicable1,25721-Jul-201005:45Not Applicable
Pblyfeat.xmlNot Applicable58321-Jul-201005:45Not Applicable
Pkmexsph.dll12.0.6539.5000651,60809-Jun-201006:58Not Applicable
Portal.dll12.0.6549.50006,506,39203-Nov-201006:44x86
Portal.dll12.0.6549.50006,506,39203-Nov-201006:44Not Applicable
Profilesrp.sqlNot Applicable551,28809-Jun-201008:35Not Applicable
Profilup.sqlNot Applicable618,70309-Jun-201008:35Not Applicable
Provfil.xmlNot Applicable20,53821-Jul-201005:45Not Applicable
Provfile.xmlNot Applicable4,89821-Jul-201005:45Not Applicable
Pubrfeat.xmlNot Applicable95821-Jul-201005:45Not Applicable
Query9x.dll12.0.6510.5000219,47217-Jun-200923:01Not Applicable
Reportcenterxmlonet.xmlNot Applicable25,16904-Nov-200922:36Not Applicable
Rteercs.asxNot Applicable11,41802-Feb-201107:37Not Applicable
Rteetbl.asxNot Applicable41,58302-Feb-201107:37Not Applicable
Rtepued.asxNot Applicable20,48402-Feb-201107:37Not Applicable
Sclonet.xmlNot Applicable32,39217-Apr-200908:51Not Applicable
Sctabslistallitems.aspxNot Applicable2,63908-Dec-200907:15Not Applicable
Scxmlonet.xmlNot Applicable54,69217-Apr-200910:16Not Applicable
Searchom.dll12.0.6554.50008,819,58402-Feb-201111:10Not Applicable
Searchom.dll_000112.0.6554.50008,819,58402-Feb-201111:10Not Applicable
Sharepointpub.dll12.0.6555.50003,676,05622-Feb-201120:09x86
Sharepointpub_gac.dll12.0.6555.50003,676,05622-Feb-201120:09x86
Sitesv3siteslistallitems.aspx12.0.32082,63908-Dec-200907:15Not Applicable
Sitesv3tabslistallitems.aspx12.0.32082,63908-Dec-200907:15Not Applicable
Sm.asxNot Applicable30,86908-Apr-201011:27Not Applicable
Sps.core.rsxNot Applicable85,63817-Apr-200910:18Not Applicable
Spscore.rsxNot Applicable103,75717-Apr-200917:50Not Applicable
Spscore.rsxNot Applicable116,42917-Apr-200917:50Not Applicable
Spscore.rsxNot Applicable92,89417-Apr-200917:49Not Applicable
Spscore.rsxNot Applicable83,67717-Apr-200917:25Not Applicable
Spscore.rsxNot Applicable90,79517-Apr-200917:49Not Applicable
Spscore.rsxNot Applicable89,10717-Apr-200917:49Not Applicable
Spscore.rsxNot Applicable92,53417-Apr-200917:49Not Applicable
Spscore.rsxNot Applicable121,22317-Apr-200917:49Not Applicable
Spscore.rsxNot Applicable85,63817-Apr-200910:18Not Applicable
Spscore.rsxNot Applicable89,73317-Apr-200917:49Not Applicable
Spscore.rsxNot Applicable94,47817-Apr-200917:49Not Applicable
Spscore.rsxNot Applicable97,26117-Apr-200917:49Not Applicable
Spscore.rsxNot Applicable94,20717-Apr-200917:41Not Applicable
Spscore.rsxNot Applicable92,76217-Apr-200917:41Not Applicable
Spscore.rsxNot Applicable97,79617-Apr-200917:40Not Applicable
Spscore.rsxNot Applicable92,05017-Apr-200917:40Not Applicable
Spscore.rsxNot Applicable91,32917-Apr-200917:37Not Applicable
Spscore.rsxNot Applicable87,92317-Apr-200917:38Not Applicable
Spscore.rsxNot Applicable93,35417-Apr-200917:38Not Applicable
Spscore.rsxNot Applicable90,66017-Apr-200917:37Not Applicable
Spscore.rsxNot Applicable91,75217-Apr-200917:37Not Applicable
Spscore.rsxNot Applicable114,43517-Apr-200917:36Not Applicable
Spscore.rsxNot Applicable90,27917-Apr-200917:48Not Applicable
Spscore.rsxNot Applicable92,65617-Apr-200917:37Not Applicable
Spscore.rsxNot Applicable89,02217-Apr-200917:29Not Applicable
Spscore.rsxNot Applicable128,14017-Apr-200917:29Not Applicable
Spscore.rsxNot Applicable90,96517-Apr-200917:28Not Applicable
Spscore.rsxNot Applicable112,11617-Apr-200917:28Not Applicable
Spscore.rsxNot Applicable89,55617-Apr-200917:36Not Applicable
Spscore.rsxNot Applicable87,32117-Apr-200917:48Not Applicable
Spscore.rsxNot Applicable91,35217-Apr-200917:38Not Applicable
Spscore.rsxNot Applicable91,52317-Apr-200917:38Not Applicable
Spscore.rsxNot Applicable127,69817-Apr-200917:49Not Applicable
Spscore.rsxNot Applicable83,67617-Apr-200917:25Not Applicable
Spscore.rsxNot Applicable92,24817-Apr-200917:37Not Applicable
Spscore.rsxNot Applicable90,82617-Apr-200917:36Not Applicable
Spscore.rsxNot Applicable92,45817-Apr-200917:49Not Applicable
Spsimpph.dll12.0.6529.5000788,32003-Feb-201008:46Not Applicable
Tquery.dll12.0.6554.50004,783,95202-Feb-201111:10Not Applicable
Upgrade.dll12.0.6539.5000771,99209-Jun-201007:24Not Applicable
Userprofilechangeservicewsdl.aspxNot Applicable19,95726-May-201011:29Not Applicable

Properties

Article ID: 2508964 - Last Review: May 11, 2012 - Revision: 2.0
APPLIES TO
  • Microsoft Office SharePoint Server 2007
Keywords: 
kbexpertiseinter kbqfe kbsecurity kbsecbulletin kbsecvulnerability kbbug kbfix kbsurveynew KB2508964

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com