How to Remediate MS11-073 and MS12-057 Access Database Vulnerabilities
Question details
Users need to remediate MS11-073 and MS12-057 vulnerabilities detected on Windows Server 2008 R2 caused by the Microsoft Access Database Engine 2007.
- Product
- Microsoft Access Database Engine 2007
- Device & OS
- Windows Server 2008 R2
- Scenario
- Resolving security scan flags for MS11-073 and MS12-057 on a server where Microsoft Access Database Engine 2007 is installed.
- Observed behavior
- Security scans flag the server for MS11-073 and MS12-057 vulnerabilities even if the full Office suite is not installed.
Ensure you have administrative privileges on Windows Server 2008 R2 and verify whether any active applications depend on the Microsoft Access Database Engine 2007 before making system changes.
Update or Remove Microsoft Access Database Engine 2007
The primary method to resolve these vulnerability alerts is to either apply the official Microsoft security patches or completely uninstall the legacy database engine.
Vulnerability scanners flag these specific MS-bulletins when outdated, unpatched versions of the Access Database Engine are present on the server. If the component is not actively utilized by any running service, removal is the most secure option.
Open the Control Panel on your Windows Server 2008 R2 and navigate to 'Programs and Features' to locate Microsoft Access Database Engine 2007.
If the engine is required for your applications, download and install the specific security updates associated with MS11-073 and MS12-057 from the Microsoft Update Catalog.
If no active applications require the 2007 database engine, right-click the application in Programs and Features and select 'Uninstall' to remove the vulnerability completely.
Consult Microsoft Q&A and Official Support
Since server configurations vary greatly, seeking verified guidance from Microsoft experts can ensure a safe remediation process without breaking dependencies.
Consider WPS Office as a Secure and Lightweight Alternative
While WPS Office does not resolve Windows Server database engine vulnerabilities, it is an excellent, highly secure alternative to legacy Microsoft Office suites. If you need to replace outdated Office components with a modern, frequently updated, and free office suite, WPS Office provides extensive compatibility without the heavy legacy bloat.
- 1. Download the installer: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Install WPS Office: Run the installer and follow the quick setup wizard to install the suite securely on your device.
- 3. Open your documents: Launch WPS Office to instantly open, view, and edit your existing Microsoft Office files without compatibility issues.
Frequently Asked Questions
Why do MS11-073 and MS12-057 vulnerabilities appear without the full Microsoft Office suite installed?
These vulnerabilities are tied specifically to the Microsoft Access Database Engine 2007 component, which can be installed independently by other third-party applications or server roles, even if Word, Excel, or Access itself are not fully installed.
Can I simply delete the Microsoft Access Database Engine 2007 folders to fix this?
No, manually deleting files can corrupt your system registry and break applications that depend on the engine. You should always use the 'Programs and Features' menu in the Control Panel to uninstall it properly.
Where can I find the official patches for MS11-073 and MS12-057?
Official security patches for legacy Microsoft vulnerabilities can typically be searched for and downloaded directly from the Microsoft Update Catalog website using the vulnerability ID numbers.
