MS15-070 Failures

We have been seeing “Failures” when applying several of the MS15-070 variations on systems.

  • MS15-070: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution - Office Compatibility Pack SP3 - Office Compatibility Pack SP3 - KB2965208
  • MS15-070: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution - Office 2007 SP3 - Excel 2007 SP3 - KB2965281
  • MS15-070: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution - Office 2007 SP3 - Word 2007 SP3 - KB3054996

The Fixlets were in a Baseline. When I look at the Baseline’s Action details, all the steps were completed, but the sub-Action was listed as “Failed” after the systems were rebooted.

Is there an issue with the Relevance for these Fixlets?

1 Like

Hi TimRice,

Could you open an PMR so we can collect more information on this issue?

If possible, please provide in the PMR the action return code, and the registry export of [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer]

Thank you!

1 Like

Not sure whether it’s the same case for this Fixlet/Patch, but I’ve had several of the Office updates over the last few months report as Relevant but then fail when applied via the Fixlet.

Running the same patch manually on the system, it gives a message that the patch is already installed. Uninstalling and then reinstalling the patch is successful and clears the relevance.

I have ended up making duplicates of several of the fixlets and customizing them to check the return code of the patch. If the return code is equivalent to “patch is already installed” I use wusa.exe to remove, then reinstall the patch.

If it looks like this could be the problem for you, post back here to remind me and I’ll copy a sample of one of my fixlets that operates this way.