Office 2003: Microsoft Security Advisory: Microsoft Office File Validation for Office 2003, 2007 Office, and Office 2010: April 12, 2011

SUPPORT SOLUTION:
Office File Validation (OFV) is a security feature that was introduced in Microsoft Office 2010. Office File Validation verifies that a particular binary file complies with the application’s expectations. Office File Validation can help prevent unknown binary file format attacks against Microsoft Office 97-2003 file formats. When you open Microsoft Office 97-2003 binary file (such as .doc) the file is compared to a binary schema. If the file fails this validation, you are notified that the document could be considered to be compromised. In Office 2003 and in the 2007 Office system, you are prompted about the file status and can decide to cancel opening the file or to continue to open the file. .To help protect your computer from risk, we recommend that you do not open files that you receive as email message attachments, especially if the messages arrive unexpectedly. Additionally, do not open files that you receive as attachments if the files are from a person who is unknown to you.For Enterprise customers visit the following TechNet webpage:Office File Validation for Office 2003 and Office 2007
(http://technet.microsoft.com/en-us/library/53782285-736e-4d00-b458-6170054287af.aspx)
.Install Office File Validation

Prerequisites
3,
To install Office File Validation, you must have the following prerequisites:You must have Office 2003, the 2007 Office system, or Office 2010 installed.You must have all recommended updates for all Office programs. To install all recommended updates, visit the Microsoft Update website: Microsoft Update
(http://update.microsoft.com/microsoftupdate/v6/default.aspx)
You must install the following architecture updates to Microsoft Word and Microsoft Publisher before you install Office File Validation:Microsoft Word Architecture update:Microsoft Office Word 2007 Architecture update
(http://www.microsoft.com/downloads/details.aspx?FamilyID=6bc72668-6ff8-41c8-9475-f5418b620c01)
Microsoft Office Word 2003 Architecture update
(http://www.microsoft.com/downloads/details.aspx?FamilyID=73e38bb3-1ee7-4b01-a523-c23a68eb024a)
Microsoft Publisher Architecture update:Microsoft Office Publisher 2007 Architecture update
(http://www.microsoft.com/downloads/details.aspx?FamilyID=2d86de98-cb54-4cb4-89f3-5639e427f38c)
Microsoft Office Publisher 2003 Architecture update
(http://www.microsoft.com/downloads/details.aspx?FamilyID=99d94db4-f74f-4675-af7f-3d42c4163022)
Install Office File Validation
3,
The following file is available for download from the Microsoft Download Center:Collapse this imageExpand this imageDownload the Office File Validation package now.
(http://www.microsoft.com/downloads/details.aspx?FamilyID=6a4e39a4-4c3f-4cc7-98ec-1cb2d5cb5881)
Release Date: April 12, 2011For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base: 119591 

(http://support.microsoft.com/kb/119591/
)
How to obtain Microsoft support files from online services Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file. Known issues with Office File Validation
3,
Files that were created in Microsoft Excel 2.0, Microsoft Excel 3.0, or Microsoft Excel 4.0 will fail validation when you use Office File Validation in Office 2003.Solver.xla will fail validation when you use Office File Validation in Office 2003.When you paste lots of charts or points of data into an Office 2003 document, the paste function may take a long time to complete while Office File Validation tries to validate the new data.Opening files from a network share that have many charts or points of data will take longer to open in Office 2003.Microsoft is aware of the issues and is currently investigating them.

.Default Behavior

When you try to open a Word, Excel, PowerPoint, or Publisher 97-2003 file, and that file fails Office File Validation, you receive the following warning:Collapse this imageExpand this image.Fix it for me

For Office 2010
3,
To prevent files from being opened that have failed validation, you can use the following Fix it solutions.

Disable Edit in Protected View
4,
Excel 2010
a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50658PowerPoint 2010
a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50660Word 2010
a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50662Enable Edit in Protected View
4,
Excel 2010
a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50659PowerPoint 2010
a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50661Word 2010
a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50663For Office 2003 and 2007 Office system
3,
To prevent files from being opened that have failed validation you can use the following Fix it solutions.

Disable the opening of documents
4,
Excel 2003 and 2007 a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50625Word 2003 and 2007
a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50645PowerPoint 2003 and 2007
a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50646Enable the editing of documents
4,
Excel 2003 and 2007
a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50647Word 2003 and 2007
a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50648PowerPoint 2003 and 2007
a.button { background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0; width: 139px; height: 56px; display:block; cursor:pointer; } a.button:hover { background-position: bottom right; } Fix this problem Microsoft Fix it 50649.Let me fix it myself

For Office 2010
3,
You can manually set the registry entries by using the following values: Value: DisableEditFromPVType: REG_DWORDDefault value: 0Description: When Office File Validations fails0 = Enable Edit in Protected View. 1 = Disable Edit in Protected View. Add the DisableEditFromPV REG_DWORD to any or all the following registry subkeys to disable Edit in Protected View in Office 2010:HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Security\FileValidationHKEY_CURRENT_USER\Software\Microsoft\Office\14.0\PowerPoint\Security\FileValidationHKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Security\FileValidationFor the 2007 Microsoft Office system and Office 2003
3,
You can manually set the registry entries by using the following values:Value: InvalidFileUIOptionsType: REG_DWORDDefault value: 0Description: When Office File Validations fails0 = Notify user file failed. Give user the option to load the file or not 1 = Notify user file failed. No option to load the file.For the 2007 Microsoft Office system
4,
Add the InvalidFileUIOptions REG_DWORD to any or all the following registry subkeys for Office File Validation in 2007 Microsoft Office system:HKEY_CURRENT_USER\Software \Microsoft\Office\12.0\Excel\Security\FileValidationHKEY_CURRENT_USER\Software \Microsoft\Office\12.0\Word\Security\FileValidation HKEY_CURRENT_USER\Software \Microsoft\Office\12.0\PowerPoint\Security\FileValidationFor Office 2003
4,
Add the InvalidFileUIOptions REG_DWORD to any or all the following registry subkeys for Office File Validation in Office 2003: HKEY_CURRENT_USER\Software \Microsoft\Office\11.0\Excel\Security\FileValidation HKEY_CURRENT_USER\Software \Microsoft\Office\11.0\Word\Security\FileValidationHKEY_CURRENT_USER\Software \Microsoft\Office\11.0\PowerPoint\Security\FileValidation.

For File Repair and Data Recovery, visit File Repair / Data Recovery