Update: Microsoft patches Office 2003 lockout bug
It didn't extend digital certificates' expiration date; fix must be manually downloaded
Computerworld - Microsoft on Saturday fixed a bug that locked out Office 2003 users from accessing documents safeguarded with the company's rights management security technology.
Apparently, Microsoft forgot to extend the expiration date of the digital certificates used to control access to sensitive Office 2003 documents.
On Friday, Microsoft acknowledged the problem with Office 2003 and Rights Management Service (RMS) that had blocked users from opening or saving protected documents. By Saturday, the company had rushed a hotfix into place.
All Word, Excel, PowerPoint and Outlook documents from the Office 2003 suite that had been locked with RMS were unavailable as of Dec. 11, Microsoft said Friday night in a post to the Office Sustained Engineering blog.
Users saw the message, "Unexpected error occurred. Please try again later or contact your system administrator" when they tried to open or save RMS-protected documents.
The hotfix, which let users access the locked documents, must be downloaded manually, said Microsoft; the patch will not be pushed to users automatically via Windows Update.
According to Microsoft, the problem stemmed from the expiration of the digital certificates used to lock the RMS-protected documents. "Microsoft believed it was important to establish short-term expiration dates (in this case, seven years) for these certificates to allow us to re-evaluate and update IRM [Information Rights Management] capabilities based on new, more sophisticated encryption technology," a company spokeswoman said Monday.
But Microsoft neglected to update the certificates on schedule. "The original intent was to refresh and strengthen the certificate over time," the spokeswoman added. "We have not done a thorough post-mortem on this incident since we were very focused on fixing the problem. Looking ahead, we are exploring long-term solutions that will prevent something like this from happening again in the future," she said.
Documents created with Office 2007 or the public beta of Office 2010, then locked with RMS, were not affected by the gaffe, since their certificates are still valid.
The Technologizer site first reported the Office 2003 lock-out snafu on Friday afternoon.
Gregg Keizer covers Microsoft, security issues, Apple, Web browsers and general technology breaking news for Computerworld. Follow Gregg on Twitter
@gkeizer, send e-mail at gkeizer@ix.netcom.com or subscribe to Gregg's RSS feed
.
Read more about Desktop Apps in Computerworld's Desktop Apps Topic Center.


- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Practice Management: Double Billing Rate and Improve Patient Services
- Would you like to double your billing rate and achieve faster payment for services?
Download this customer success story to see how One Health... - Mission Critical Data Explosion and Customer Case Study
- Would you like to double your tier 1 storage capacity while simultaneously reducing your storage footprint?
Download this customer success story to see how... - Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios
- Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.
- Database Activity Monitoring Is Evolving
- Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.
- Establishing a Strategy for Database Security is No Longer Optional
- The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three... All Desktop Apps White Papers
- Distributed Database Security with Real-time Monitoring
- View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with...
- InfoSphere Warehouse Packs Demo
- These flash modules make warehousing more tangible and relevant to business users through detailed explanations of the InfoSphere Warehouse Packs.
- Delivery Management -- Extending Lifecycle Management
- Date: Wednesday, June 20, 2012, 1:00 PM EDT
Siloed organizations continue doing the wrong things and doing things wrong, leading to increased costs,... - Leverage automation today to reduce IT complexity
- Date: Tuesday, June 5, 2012, 2:00 PM EDT
Whether your B2B complexity is caused by multiple technologies due to M&A, business or application specific... - Redefine Expectations in the Data Center
- Need to do more with less? Watch this video to learn how HP ProLiant Gen8 servers can help your business deploy servers three... All Desktop Apps Webcasts