[Upstream] [hardy] Cannot Open password-encrypted MS Office 2003 files

[ygrant]

Binary package hint: openoffice.org2

1) lsb_release -rd
Description: Ubuntu 11.04
Release: 11.04

2) apt-cache policy libreoffice-impress
libreoffice-impress:
  Installed: 1:3.3.2-1ubuntu5
  Candidate: 1:3.3.2-1ubuntu5
  Version table:
 *** 1:3.3.2-1ubuntu5 0
        500 http://us.archive.ubuntu.com/ubuntu/ natty-proposed/main i386
Packages
        100 /var/lib/dpkg/status
     1:3.3.2-1ubuntu4 0
        500 http://us.archive.ubuntu.com/ubuntu/ natty/main i386 Packages

3) What is expected to happen using LibreOffice Impress via the Terminal:

cd ~/Desktop && wget https://bugs.launchpad.net/ubuntu/+source/openoffice.org/+bug/192056/+attachment/2125234/+files/B2R%20Veranstaltungen%202004%20Thomas%20Berger%20CP-F.ppt && loimpress -nologo B2R\ Veranstaltungen\ 2004\ Thomas\ Berger\ CP-F.ppt

and one is prompted for the password.

4) What happens instead is a window pops up noting:

LibreOffice 3.3
Read-Error.
The Loading of password-encrypted Microsoft PowerPoint presentation is not supported.

[Thomas-hovezak (thomas-hovezak)]

when trying to open an password-encrypted ppt you get following message:

read error
the loading of password-encrypted Microsoft PowerPoint presentation is not
supported..

[Thomas-hovezak (thomas-hovezak)]

Created attachment 24419
the ppt file which caused the issue

[Wolframgarten (wolframgarten)]

Changed to defect, reassigned.

[Christian-guenther-v (christian-guenther-v)]

set to new and change the target.

[Christian-guenther-v (christian-guenther-v)]

With the internal bug 115982 you fixed something about password protected PPT-Files.
Why can't we load this file.
Has this file another encryption?
Please have a look.

[Sven-jacobi (sven-jacobi)]

sj->cgu: As you can read in 115982 PowerPoint is providing RC4 encryption only,
and RC4 is not be supported by OOo. That time I added the new error message"read
error the loading of password-encrypted Microsoft PowerPoint presentation is not
supported.." so that you are not getting the general io error if trying to load
protected files.

[Christian-guenther-v (christian-guenther-v)]

OOo should support RC4 encryption to load Password protected PPT-Files.

[Bettina-haberer (bettina-haberer)]

Set issue type, target and keywords.

[Christian-guenther-v (christian-guenther-v)]

*** Issue 62955 has been marked as a duplicate of this issue. ***

[Wolframgarten (wolframgarten)]

*** Issue 65376 has been marked as a duplicate of this issue. ***

[Marcelly-bernard (marcelly-bernard)]

We can see in various OOo forums that PowerPoint files password protected for
modifications, but not protected for reading, are becoming common.

Windows users (Win 200 and above) can display them with the free PowerPoint Viewer
2007.
But users of other OS (Linux, Mac) cannot read these PowerPoint files.

This is a real lack of compatibility for OpenOffice.org in the non-Microsoft world.

[Jamie Strandboge (jdstrand)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

[ygrant (ygrant)]

Hi:

URGENT!!!!!

Thanks for your response, which certainly has not help my problem. This is not a security issue. It also is not a BUG

Microsoft allows you to open password-protected files as read-only.
I purchased this laptop with LINUX to do presentations while traveling. So far I am stuck, I cannot use the laptop because all my presentations from my client are password protected for a reason.

Can you report this to Open Office developers? I know it is not a bug. But is there some patch that will allow me to open a Microsoft password-protected file in Open Office?

If there is no solution, then please say so. We can send a man on the moon, isn't there a way to resolve such a simple problem as opening a Microsoft Presentation password-protected file in Open Office?

With Kind Regards,

Yvette Grant
ITIL Service Manager
416-286-1442
416-402-2563 (Mobile)
<email address hidden>

-----Original Message-----
From: <email address hidden> [mailto:<email address hidden>]On Behalf Of
Jamie Strandboge
Sent: Friday, March 28, 2008 8:54 AM
To: <email address hidden>
Subject: [Bug 192056] Re: Cannot Open Read-only MS Office 2003 files

Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug. I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Visibility changed to: Public

** This bug is no longer flagged as a security issue

--
Cannot Open Read-only MS Office 2003 files
https://bugs.launchpad.net/bugs/192056
You received this bug notification because you are a direct subscriber
of the bug.

Status in Source Package "openoffice.org2" in Ubuntu: New

Bug description:
Binary package hint: openoffice.org2

I am using OpenOffice 2.0.

I am trying to open a read-only MS PowerPoint presentation in OpenOffice.
I received the folllowing error:
Read Error: The loading of password-encrypted Microsoft PowerPoint presentaions is not supported.

This seems to be a simple problem. Can you help please. This is crucial.

Kind Regards,

Yvette

[Lars Noodén (larsnooden)]

Yvette,

I'm not sure how I got CC:d in this, but since I have been, I'll add my 2¢.

The security on MS Office documents appears to be easily circumvented and probably only exists for the dual purposes of (false) marketing and hindering interoperability.
However, I myself neither use nor condone the use of MS Office, so I cannot do more than say that I hear from time to time about locked documents being retrieved.

But the above is not immediately helpful in getting your lost documents.

Since this is not a bug and not a problem with the *buntu distros, the best place to get practical information regarding question like this would be to contact the OpenOffice.org Users' mailing list and pose your question there:
   <email address hidden>

see also
  http://www.openoffice.org/servlets/SummarizeList?listName=users
  mailto:<email address hidden>
  http://www.openoffice.org/servlets/SearchList?listName=users

From there you should be able to 1) sooner or later get information about how to get your lost documents, 2) ensure that the needed functionality is eventually added to OpenOffice.org if it is currently missing.

[NoOp (glgxg)]

Please see:

http://qa.openoffice.org/issues/show_bug.cgi?id=46307
[* Summary: Support RC4 encryption to load password protected PPT-files]

This is an upstream OOo bug.

[ygrant (ygrant)]

Hi:

I seemed to be receiving only automated system response.

Can someone please respond to my dilemma. From the system replies I am receiving this problem originated from 2005. We are in 2008!

Yes I have checked the links you provided. It just explained you have a problem.

Will it be resolved? We also tested it on the latest version of Open Office, the problem is still unresolved.

I understand it is not a Security issue, you have mentioned this over and over in your response. It is a performance issue.

What I am expecting is a better response. SUCH AS "We have a compatibility issue and we are dealing with it". Or "we do have a patch that will fix this problem".

Kind Regards,

Yvette Grant
ITIL Service Manager
416-286-1442
416-402-2563 (Mobile)
<email address hidden>

-----Original Message-----
From: <email address hidden> [mailto:<email address hidden>]On Behalf Of
NoOp
Sent: Saturday, March 29, 2008 10:07 PM
To: <email address hidden>
Subject: [Bug 192056] Re: Cannot Open Read-only MS Office 2003 files

Please see:

http://qa.openoffice.org/issues/show_bug.cgi?id=46307
[* Summary: Support RC4 encryption to load password protected PPT-files]

This is an upstream OOo bug.

--
Cannot Open Read-only MS Office 2003 files
https://bugs.launchpad.net/bugs/192056
You received this bug notification because you are a direct subscriber
of the bug.

Status in Source Package "openoffice.org2" in Ubuntu: New

Bug description:
Binary package hint: openoffice.org2

I am using OpenOffice 2.0.

I am trying to open a read-only MS PowerPoint presentation in OpenOffice.
I received the folllowing error:
Read Error: The loading of password-encrypted Microsoft PowerPoint presentaions is not supported.

This seems to be a simple problem. Can you help please. This is crucial.

Kind Regards,

Yvette

[Wolframgarten (wolframgarten)]

*** Issue 61691 has been marked as a duplicate of this issue. ***

[Wolframgarten (wolframgarten)]

*** Issue 87922 has been marked as a duplicate of this issue. ***

[Cno (cno)]

added 'Powerpoint' to the issues summary

[kpalagin (kpalagin)]

Dear developers,
please consider this issue for implementation.
Thanks a lot for your attention.
WBR,
KP.

[Paulo Sequeira (psequeirag)]

Created attachment 61218
MS PowerPoint 2007 dialog requesting password when opening file.

[Wolframgarten (wolframgarten)]

*** Issue 94963 has been marked as a duplicate of this issue. ***

[Clippka (clippka)]

ccheney, since you changed the target, do you plan to implement it? Thats great
news!

[Ccheney-b (ccheney-b)]

cl,

"OOo Later" essentially is a target to send bugs to die never to be fixed or
looked at again. So I bumped up the target from OOo Later since this issue is
becoming more important to users as according to one of the comments they can't
even open documents that are protected from modification. I have no idea how to
fix the bug myself, sorry.

[Nesshof (nesshof)]

it does not make sense to set a concrete target if no resources are assigned for
implementation, set target to 3.x.

[Cno (cno)]

@mh: target still shows 3.2 .. which I don't mind, but seems not correct

[Fabio M. Panico (fbugnon)]

Dear developers,
Please consider this issue for implementation.
I am very happy OpenOffice user, but it is a real problem not to be able to open
those password-protected documents.
Thanks a lot for your attention.
fmbp

[Wolframgarten (wolframgarten)]

*** Issue 97966 has been marked as a duplicate of this issue. ***

[Michel-stpierre-b (michel-stpierre-b)]

Hi,
Is it really necessary to support RC4? Would it be possible to ask the user if
it is ok to open the file in read-only mode if the password is not provided? In
MS-Office, it is possible to open the file in read-only if the password is not
known. This should not require RC4 and should be easier to implement; no?

This problem is becoming more and more annoying since more and more files like
that are becoming popular.

Thanks !!!

[Mick Russell (debnmick)]

The real issue isn't that of being open to load as read only or read/write, it's
that files with this protection scheme enabled, even if no password is set,
simply cannot be opened at all.
In case I have fumbled my words: If RC5 password protection is enabled, but no
password is specified, MS Powerpoint considers the files to no be protected and
opens them with full read/write permissions, but OOo cannot open the file at
all. If the file is opened in MS Pp and the properties edited to remove the RC5
setting (uncheck a box), then OOo can open the file as normal.

[M Cris (mcris)]

So, is anybody working to open .pps files in Open Office that MS Powerpoint
Viewer is able to open? Maybe an Open Office PPS Viewer is necessary. Please
respond.

[Cno (cno)]

Hi mcris:
Opening pps files ia a different subject. PLs see issue 52755

[M Cris (mcris)]

Not really, since the issue is the Password protect problem with some (many)
.pps files, that for MS Powerpoint Viewer is not a problem, but Open Office
cannot open them.

[Nicolas-lecornuwww (nicolas-lecornuwww)]

This password-protected Microsoft PowerPoint slide show playback issue is really
annoying, this breaks a little compatibility between Microsoft Office and
OpenOffice.org. He would have found a way to open these slide shows just for
reading and when clicking on the icon editing the file, a window appears to
request the password (this is just an idea).

[Mozaic (mozaic)]

The issue 110254 (http://qa.openoffice.org/issues/show_bug.cgi?id=110254) could
help to close this issue, isn't it?

[Nico-lecornu (nico-lecornu)]

Created attachment 42540
    message unable to read slide presentations with password

Hello and congratulations for this first release of LibreOffice:

I have a problem recurring with LibreOffice as on OpenOffice.org which is unable to read Microsoft Powerpoint slideshows with password.
When I want to read one, Impress puts me a message on a shot which I publish. An outcome is open on openoffice.org but nothing seems to be done:

http://QA.OpenOffice.org/issues/show_bug.cgi?id=46307

[Nopower (nopower)]

would be a nice feature edge, is it a candidate for an easy ( well harder ) hack, presumably the protection is documented now etc. -> thorsten who hopefully knows more

[penalvch (penalvch)]

Attachment from upstream OOo bug that demonstrates the problem.

[penalvch (penalvch)]

Attachment from upstream OOo bug that demonstrates the problem.

[penalvch (penalvch)]

File that demonstrates the problem:
https://bugs.launchpad.net/ubuntu/+source/openoffice.org/+bug/192056/+attachment/2125234/+files/B2R%20Veranstaltungen%202004%20Thomas%20Berger%20CP-F.ppt

[penalvch (penalvch)]

ygrant, Please execute the following command, as it will automatically gather debugging information, in a terminal:
apport-collect 192056
When reporting bugs in the future please use apport by using 'ubuntu-bug' and the name of the package affected. You can learn more about this functionality at https://wiki.ubuntu.com/ReportingBugs.

[R4zoli (r4zoli)]

*** Issue 118448 has been marked as a duplicate of this issue. ***

[Björn Michaelsen (bjoern-michaelsen)]

[This is an automated message.]
There are no new official OpenOffice.org releases in Ubuntu packaging anymore => Won't Fix

If the problem persists, please mark this bug as "also affects project Libreoffice" or "also affects distribution Libreoffice (Ubuntu)" if that has not happened already.

Please leave references to upstream OpenOffice.org bugs in place to allow cross pollination.

[Björn Michaelsen (bjoern-michaelsen)]

This is:
- a clearcut upstream issue
- wishlist/feature request unlikely to be fixable with a simple patch
- wont be fixed in libreoffice packaging
Resolving as WONTFIX in libreoffice packaging. This does not mean the issue will not be cared about, but if it is cared about (even by Ubuntu/Canonical contributors), it is done upstream at LibreOffice.

[Tbehrens-u (tbehrens-u)]

Coming back to this - Rodo, on your radar? Kohei, any pointers - we do that for xlsx already, do we?

[Jbf-faure-9 (jbf-faure-9)]

*** Bug 35327 has been marked as a duplicate of this bug. ***

[Tbehrens-u (tbehrens-u)]

(In reply to comment #3)
> Coming back to this - Rodo, on your radar? Kohei, any pointers - we do that for
> xlsx already, do we?
>
Anybody any pointers to MS rc4 encryption details? At least I see code in sw/source/filter/ww8/ww8par.cxx that at least claims to do something like that?

[Kohei Yoshida (kohei-yoshida)]

(In reply to comment #3)
> Coming back to this - Rodo, on your radar? Kohei, any pointers - we do that for
> xlsx already, do we?

We only do AES 128 for xlsx, which Excel 2007 uses by default. It generally works, but occasionally fails (there are several bug reports for this).

AFAIK we support RC4 only for the binary i.e. xls.

MSCodec_Std97 in filter does the RC4 encryption, both for encryption and decryption. We use that for the binary xls encryption support. I'm not sure about Writer's support for encrypted doc, but it probably uses this class too.

[penalvch (penalvch)]

Changing slideshows -> slideshow. Let us please keep this bug targeted to the file already discussed. :D

[Tbehrens-u (tbehrens-u)]

Apologies for not having gotten around fixing this bug yet; unfortunately in future I'll have even less time at my disposal for this, so I'm freeing up ownership for other volunteers to take over.

[DeMus (jan-mussche)]

Also I can not open a password encrypted pps. I am using 4.0.3.3. I would expect, if I may be so bold, that if this error exists from the early days of Libreoffice that somebody would have looked at it and made it possible. Unfortunately not.

[rickyrockrat (rickyrockrat)]

Wow. It has been over 7 years, and nobody has been able to fix this? Really? The read-only option sounds like a simple short term solution, and shouldn't require encryption.

[rickyrockrat (rickyrockrat)]

So someone who has MSO, can you please post the 3 files for post # 34 in the following URL:
https://bugs.freedesktop.org/show_bug.cgi?id=38370

I could even take a look then.

[julien2412 (serval2412-6)]

*** Bug 72552 has been marked as a duplicate of this bug. ***

[julien2412 (serval2412-6)]

Just for information, here is a link about RC4 CryptoAPI Encrypted Summary Stream used for
http://msdn.microsoft.com/en-us/library/dd943321%28v=office.12%29.aspx
(link given by this: http://msdn.microsoft.com/en-us/library/dd909022%28v=office.12%29.aspx and so for Powerpoint files)

[julien2412 (serval2412-6)]

May http://opengrok.libreoffice.org/xref/core/sw/source/filter/ww8/ww8par.cxx#5563 be an example to follow?

[HJ (heywoodj123)]

Just ran into this. (Password-protected PPT, opens fine on PPT 2003 SP3 under XP SP3, fails in OpenOffice 4 on OS X.)

Just added a vote to this bug. To me this is pretty fundamental -- much closer to "broken essential functionality" than "enhancement."

-H

[Davian818 (davian818)]

*** Bug 87233 has been marked as a duplicate of this bug. ***

[guirauton (alain-guirauton)]

(In reply to Christopher M. Penalver from comment #2)
> File that demonstrates the problem:
> https://bugs.launchpad.net/ubuntu/+source/openoffice.org/+bug/192056/
> +attachment/2125234/+files/
> B2R%20Veranstaltungen%202004%20Thomas%20Berger%20CP-F.ppt

Let me confirm the problem on the example file above.

[guirauton (alain-guirauton)]

Hi,
Let me remember that this problem has been solved for the docx files,
see [Bug 75955] perhaps the same problem for ppt files ?

Thanks
Alain.

[guirauton (alain-guirauton)]

Hi,
Please notice that (at least for me) this problem must be declared with
Importance : Highest - Critical
All the documents received to work are password protected (and with long passwords more than 8 characters) ... My dreams are not to go back to µSoft.

Thanks
Best regards,
Alain.

[Björn Michaelsen (bjoern-michaelsen)]

(This is an automated message.)

LibreOffice development currently prioritizes bugs with the so called MAB (most annoying bugs) -- as this bug has not run through that process (including writing a short rationale for this bug being a candidate and other who are watching the tracker bug silently approving that rationale etc.) its priority is set to high. Note this is effectively no change in the urgency assigned to this bug, as we are currently not making a difference between high and highest and severity is untouched.

You can find out more about MABs and how the process works by contacting libreoffice qa on irc:

 http://webchat.freenode.net/?channels=libreoffice-qa

The QA wiki page also gives you hints on how to get in contact with the team (if IRC fails you, your next best choice is the mailing list):

 https://wiki.documentfoundation.org/QA

[hifron (hifron)]

It is Bug 33538:
https://bugs.documentfoundation.org/show_bug.cgi?id=33538&redirected_from=fdo

[OOoForum (oooforum)]

*** Issue 127346 has been marked as a duplicate of this issue. ***

[Damjan-5 (damjan-5)]

*** Issue 114903 has been marked as a duplicate of this issue. ***