search cancel

MS14-023-proofloc2010-kb2878284-fullfile-x86-glb.exe falsely targeting computers.


Article ID: 161223


Updated On:


Patch Management Solution for Windows


MS14-023-proofloc2010-kb2878284-fullfile-x86-glb.exe is falsely targeting computers. The computers, Win7 SP1 64-bit, have Office 2010 SP2 32-bit installed. They do have Office Proofing Tools 2010 installed.

When manually running KB2878284 on the clients it fails saying it is not applicable. Yet Patch Management shows it is applicable and continually attempts to install it. The attempt to install fails with an exit code of 17031.

Exit code 17031


Suspect a rules issue.


This has been referred to Shavlik for review.


October 23rd, 2014:
Shavlik provided the following information:

Our detection logic looks at the CSS7DATA0009.dll file to determine if MS14-023 is applicable. If this files exists in multiple %proof2010path% directories this patch will continue to show as missing due to one of the languages the Proofing Tools are installed in not meeting the criteria for us to consider this patch as installed. The detection logic is unable to exclude patches even if they are not applicable to all versions of the installed software, especially with regards to Office patches. I cannot speak to Microsoft's detection logic, as I am unsure what they are looking at to determine if this patch is needed for the software, however I can say this patch is indeed missing and we will continue to report it as such since there is an instance that is not fully patched.

MS14-023/Q2878284 checks to see if Proofing Tools 2010 SP1 or SP2 is installed then we check to see if the file version of CSS7DATA0009.DLL is at 14.0.7117.5000 or greater. If not then we consider the patch missing. Microsoft has a similar bug in Office 2007 where if any Office 2007 components are not at a similar Service Pack level, the patch will fail to install, but in this case it's the language pack that is not at same Service Pack level. We could mask our detection to match Microsoft Windows Update but we would just be hiding the fact that the update is needed. We feel that showing patch is missing is accurate. In doing so the customer is made aware that they need to get their environment to that level where the patch is installable. We feel this is a better option than hiding the fact that they need the patch. Unfortunately in this case we don't support the language pack otherwise we would offer a Service Pack for it.

I hope this provides you with useful information as to how our detection logic differs from Window Update.

Closing this as working as designed.

Applies To

SMP 7.5 SP1

Client Computers are Windows 7 SP1 64-bit.
OS Name : Microsoft Windows 7 Enterprise
OSVersion : 6.1.7601
OSArchitecture : 64-bit
OSBuild : 7601
SPVersion : 1