Microsoft KB Archive/937832

= Description of the security update for SharePoint Server 2007: October 9, 2007 =

Article ID: 937832

Article Last Modified on 10/17/2007

-

APPLIES TO


 * Microsoft Office SharePoint Server 2007

-



Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 How to back up and restore the registry in Windows XP and Windows Vista



INTRODUCTION
Microsoft has released security bulletin MS07-059. The security bulletin contains all the relevant information about the security update for Microsoft Office SharePoint Server 2007. This information includes file manifest information and deployment options.

To view the complete security bulletin, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/bulletin/ms07-059.mspx

Note When you apply this security update, we recommend that you also apply the Microsoft Windows SharePoint Services 3.0 security update that is dated October 9, 2007.

For more information about the Windows SharePoint Services 3.0 security update, click the following article number to view the article in the Microsoft Knowledge Base:

934525 Description of the security update for Windows SharePoint Services 3.0: October 9, 2007



How to deploy software updates for SharePoint Server 2007
We recommend that you follow the processes that are described in the Deploy software updates for Office SharePoint Server 2007 topic for most deployment scenarios. These deployments include deployments from stand-alone server deployments to very large server farms.

For more information, visit the following Microsoft Web site:

http://technet2.microsoft.com/Office/en-us/library/f484f5f2-35bb-4d70-bf56-dd1c4c287c721033.mspx

Downloads
'''Security Update for Microsoft Office SharePoint Server 2007 x64 (KB937832)

'''http://www.microsoft.com/downloads/info.aspx?na=22&p=1&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=&u=%2fdownloads%2fdetails.aspx%3fFamilyID%3d1d319164-d133-4493-be27-1aeda62362c4%26DisplayLang%3den

Security Update for Microsoft Office SharePoint Server 2007 (KB937832)

http://www.microsoft.com/downloads/info.aspx?na=22&p=2&SrcDisplayLang=en&SrcCategoryId=&SrcFamilyId=&u=%2fdownloads%2fdetails.aspx%3fFamilyID%3daaea9695-f541-4c4c-9107-81ead5cfc8c9%26DisplayLang%3den

Known issues
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.  After you install this security update, three entries are added to the &quot;Add or Remove Programs&quot; item in Control Panel. You upgrade a Microsoft Windows SharePoint Services 3.0 site to a SharePoint Server 2007 site. If you apply this security update during the upgrade process, the upgrade process is not completed successfully.

To work around this issue, install SharePoint Server 2007, make a change in the registry, and then run the &quot;SharePoint Products and Technologies Configuration Wizard.&quot; To do this, follow these steps:  Install SharePoint Server 2007. Click Start, click Run, type regedit, and then click OK. Click the following registry subkey:

 

 Right-click SetupType Run psconfig to run upgrade, and then click Modify. In the Value data box, delete B2B_UPGRADE, type SKU2SKU_UPGRADE, and then click OK.</li> On the File menu, click Exit to exit Registry Editor.</li> Run the &quot;SharePoint Products and Technologies Configuration Wizard.&quot;</li></ol> </li> You use quiet mode to install SharePoint Server 2007. If this security update is applied during the installation, the &quot;SharePoint Products and Technologies Configuration Wizard&quot; unexpectedly runs after the installation program has finished.

To resolve this issue, extract this security update to a folder on the computer. Then, copy the files to the Updates folder of the program's release version. After the extracted files are copied to that location, the folder is ready to be used to install the release version of the program that is updated to this security update level.

</li> This security update encounters a PSConfig failure if the SharePoint database is disconnected from the server before the security update is applied.

</li> If you run a virus-scanning program during the installation of this security update, you may experience intermittent issues during the installation. To resolve these issues, turn off the virus-scanning program before you install this security update.</li> The hotfixes for the following issues are included in this security update. However, if you install a SharePoint Server 2007 service pack after you install this security update, the following hotfixes are lost: <ul> You use a custom template in a Windows SharePoint Services 3.0 site collection. If you create a new Web page, all standard Web Parts may not be available when you click Add a Web Part.

</li> Some third-party services may be incorrectly stopped when you apply this security update. When this issue occurs, you must restart the computer after you apply this security update.

</li> You connect to a Windows SharePoint Services 3.0 site collection or to a SharePoint Server 2007 site collection. If the page contains a Calendar Web Part that is set to the Calendar view, the page may not load the whole page. This issue may occur if you do not have permission to read the Calendar list.

</li> When you use Forms Based Authentication (FBA) to search a SharePoint Server 2007 site collection, search results are not returned. However, if you use NTLM to search the SharePoint Server 2007 site collection, search results are returned.

</li> When you run a gradual upgrade of a Microsoft SharePoint Portal Server 2003 site collection to SharePoint Server 2007, the upgrade may fail. Additionally, you receive an &quot;Unknown Error&quot; error message.

</li> You have a site collection that was upgraded to SharePoint Server 2007. If the site URL contains a period, a full crawl may not index the site collection. However, an incremental crawl indexes the site collection as expected.

</li> You use the Include values from all crawled properties mapped option. Then, you remap the Author property to other crawled properties. When you do this, the Type property is changed to a multivalued property object. If you then decide not to use the Include values from all crawled properties mapped option, the Type property is not changed back to its default text property.

</li> If you upgrade a Windows SharePoint Services 3.0 site collection to a SharePoint Server 2007 site collection, the site may not appear to have been upgraded. Instead, the site collection continues to function as a Windows SharePoint Services 3.0 site.

</li> When you click the Profile page for a key performance indicator (KPI) in a SharePoint Server 2007 site collection, you receive the following error message:

Incorrect function (Exception from, HRESULT:0x80070001).

</li> <li>When a full crawl is performed to crawl .pdf files in a SharePoint Server 2007 site collection, the crawl may not finish. Additionally, CPU usage may increase to 100 percent. This issue may occur when an .ocn file is embedded in the .pdf file.

</li></ul> </li></ul>

Prerequisites
There are no prerequisites for this security update.

Restart information
In certain circumstances, you may have to restart the computer. If you must restart the computer, follow these steps:
 * 1) Restart the computer.
 * 2) Run the &quot;SharePoint Products and Technologies Configuration Wizard.&quot;
 * 3) Verify that all SharePoint services are running in the services console.
 * 4) Verify that all Web sites are running in the Internet Information Services (IIS) Manager.

Removal information
You cannot remove this security update after it is installed.

Additional query words: moss2007 moss2k7 moss12 update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service dos microsoft office sharepoint server office security patch performance reliability update download 2007 fix

Keywords: kbbug kbfix kbsecvulnerability kbqfe kbsecurity kbpubtypekc kbexpertiseinter kbmoss2007postrtmfix KB937832

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.