Office SP3 Giveth Security but Taketh Away Plenty [Updated]
Posted 09/21/07 at 11:01:53 PM by Mark Soper
Monday, Microsoft introduced Service Pack 3 for Office 2003. This 118MB download is packed full of updates, including both previous service packs and many additional updates. As usual, Microsoft says the update fixes issues involving the "big three" concerns for any Windows user: security, stability, and performance. But, what will you lose in the process?
Goodbye, Legacy Files, Goodbye!
Install SP3, and Office 2003 blocks access to a bunch of file formats, including Lotus 1-2-3 and Quattro spreadsheets, .DIF and .SLK database files, PowerPoint presentations predating PowerPoint 97; very old versions of Word for Windows (1.x, 2.x) and Macintosh (4.x, 5.x) files, CorelDraw image files (.cdr), and others. Mama Microsoft says these filetypes present various security risks. The problem is, you might depend upon Office 2003 for access to these files. Fortunately, if you're not afraid of the Windows Registry (I recommend respect, but not fear), you can fiddle your system to enable Office 2003 post-SP3 to use these files. See Knowledge Base article 938810 for details.
What Else Is Gone?
Here are just three examples of changes that might cause you grief at home or the office:
- Fast Saves has left the building. It may be the fastest way to save a file, but Fast Saves leaves in metadata, such as comments ("this paragraph is my idiot boss's idea") that might lead to security issues (like losing your job). Can you remove the metadata yourself? Yes, you can. Does Microsoft trust you to do it? Not anymore. Are you surprised? Probably not.
- Some add-ins and ActiveX controls won't work as expected. Don't like it? The workaround reduces security (of course).
- Microsoft Document Imaging gets broken by SP3, but you can fix it - again.
For links to all of the changes, good, bad, and ugly, see the Description of Office 2003 SP3 page.
Should You Install SP3?
Office 2003 SP3 looks like a really mixed bag. If you (or your company) access legacy data files, installing SP3 will create big headaches. And, even if you don't, other changes in SP3 have the potential to make users and system administrators alike reach for their favorite pain reliever. Install SP3 at home, and you might find yourself short of playtime while you fix problems.
Before you install SP3, take the time to read all of the notes - and keep in mind that the only way to banish SP3 from your system if you change your mind later is to uninstall Office 2003 and reinstall it. Ouch! As for me, I'm going to wait a while. Microsoft's been known to issue revised versions of its service packs - and this one looks like a prime candidate for second thoughts from Redmond.
The Office 2003 SP3 download page has links to previous service packs and fixes, so you can choose the updates you need yourself.
[the following section was added 9-23-07]
Upgrading to SP3 and Keeping Your Legacy File Options Open - the Easy Way
You (or your company) may decide that the upgrade to Office 2003 SP3 is worthwhile, but if you need continued access to legacy file formats that SP3 kicks to the curb, there are a couple of ways around the problem without tinkering with the Windows Registry:
1. Use a standalone file conversion program, such as:
- DataViz's Conversions Plus. The new version is Windows Vista (and XP) compatible, and can convert virtually all legacy file formats that Office 2003 will block after the SP3 upgrade, including MacOS files (if you need to read Mac-formatted floppy discs, you also need MacDrive 7).
- Advanced Computer Innovation's File Merlin. File Merlin also supports virtually all legacy file formats, and the company also offers online conversions.
2. Run a second office suite and use it mainly for conversions, such as:
- OpenOffice 2.x. See Chapter 3 of the OpenOffice 2.0 documentation for a list of file formats supported.
- Corel WordPerfect Office X3. To see a list of file formats supported by WordPerfect Office X3, open the Corel support page, enter 757264 in the text field, and click the link provided.
haha, everytime that stupid
Submitted by tiredoldman on Sun, 12/09/2007 - 8:37pm
haha, everytime that stupid auto update comes on with "New Update",, it's that Office 2003 SP3 patch.
Stupid thing won't go away !!
When I give up and tell it to install it,,it won't,, it tries,and fails, WHY ?? Because I don't have that program !!But, this dang thing still try's to tell me to install the blasted thing. hahahahaa
Why Legacy File Support is Important - Now
Submitted by Marcus_Soperus on Tue, 09/25/2007 - 7:35am
Microsoft might like to wave a magic wand and banish all non-MS file formats from the world, but it's not happening. Service bureaus, libraries, universities (especially those serving older non-traditional students), and other organizations that never know where the next data file is coming from are just a few of the reasons that legacy file access continues to be important.
For a long time, I've advocated custom installations of graphic programs and office suites so that you can select all import/export file filters, not just the few that are currently popular. Microsoft's decision to take still more file formats off Office's table makes this strategy less useful and more difficult than ever before for businesses using Office to truly serve the needs of their customers.
----------------------------------------------
It's amazing how illogical a business built on binary logic can be.
Legacy File Support - Legal Requirements
Submitted by myrmidon on Sun, 01/06/2008 - 4:34am
FDA requirements for some products require that records be retrievable and reproducable for 7 years and you must be able to prove that they have not been altered.
I don't know about Sarbanes Oxley requirements
geeze with all the tin hats
Submitted by N25PHILLY on Mon, 09/24/2007 - 2:06pm
open office is fine if you are a freshman in college, but at least where I work it just couldn't cut it. I would miss the awesome stuff like Infopath. With office 2007, sorry but open office just can't compare. As for SP3, seriously, if you are using any of those file formats, why not just go to chiseling your data on stone. Time to get up to date. I've never run into any of those formats in my life.
GENUINE DISADVANTAGES...TO DIGITAL-RIGHTS MANAGEMENT
Submitted by NORDNORD on Sun, 09/23/2007 - 10:00am
------- CONSUMERS WHO GAVE UP THEIR RIGHTS
------- by purchasing willingly
------- DRM-INFESTED WINDOWS (VERSIONS AFTER 2000)
------- and
------- DRM-INFESTED OFFICE (VERSIONS AFTER 2000)
------- deserve little sympathy.
------- Now, hurry up and go buy Vista,
------- SUCKERS!!!
na
Submitted by fnordfnord on Sun, 09/23/2007 - 9:15am
na
WOW I mean "WOW"
Submitted by dave23d on Sat, 09/22/2007 - 7:51pm
Microsoft must be under more legal pressure if they are to strip that much out of MS Office.
I do not believe that file formats will compromise security. Only operating system design allows security issues to happen.
Don't be the Systems Administration clown.
Use OpenOffice :)
Love Linux and 3D Linux Games :)
Yeah I use open office
Submitted by Rangerboi on Sat, 09/22/2007 - 3:26pm
Yeah I use open office presently and its just as good if not better than MSO I dont see why people really bother buying MSO unless they like the prettier GUI...
Erm...
Submitted by sc123 on Fri, 09/21/2007 - 8:38pm
I just noticed that the Office 2003 SP3 comes up in MS Update for a system with Office 2007 installed. It is a brand new system so there shouldn't be any reason to see SP3. Mark, can you check into this?
openoffice?
Submitted by satr on Sat, 09/22/2007 - 7:28am
isnt that open office is much more flexible and easier to use than ms office eh
Feature
Review
Feature
Feature
Feature





