LibreOffice Productivity Suite

[Upstream] [hardy] Cannot Open password-encrypted MS Office 2003 files

Reported by ygrant on 2008-02-15
60
This bug affects 8 people
Affects Status Importance Assigned to Milestone
LibreOffice Productivity Suite
Confirmed
Wishlist
OpenOffice
Confirmed
Unknown
libreoffice (Ubuntu)
Wishlist
Unassigned
openoffice.org (Ubuntu)
Low
Unassigned

Bug Description

Binary package hint: openoffice.org2

1) lsb_release -rd
Description: Ubuntu 11.04
Release: 11.04

2) apt-cache policy libreoffice-impress
libreoffice-impress:
  Installed: 1:3.3.2-1ubuntu5
  Candidate: 1:3.3.2-1ubuntu5
  Version table:
 *** 1:3.3.2-1ubuntu5 0
        500 http://us.archive.ubuntu.com/ubuntu/ natty-proposed/main i386
Packages
        100 /var/lib/dpkg/status
     1:3.3.2-1ubuntu4 0
        500 http://us.archive.ubuntu.com/ubuntu/ natty/main i386 Packages

3) What is expected to happen using LibreOffice Impress via the Terminal:

cd ~/Desktop && wget https://bugs.launchpad.net/ubuntu/+source/openoffice.org/+bug/192056/+attachment/2125234/+files/B2R%20Veranstaltungen%202004%20Thomas%20Berger%20CP-F.ppt && loimpress -nologo B2R\ Veranstaltungen\ 2004\ Thomas\ Berger\ CP-F.ppt

and one is prompted for the password.

4) What happens instead is a window pops up noting:

LibreOffice 3.3
Read-Error.
The Loading of password-encrypted Microsoft PowerPoint presentation is not supported.

Jamie Strandboge (jdstrand) wrote :

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

Hi:

URGENT!!!!!

Thanks for your response, which certainly has not help my problem. This is not a security issue. It also is not a BUG

Microsoft allows you to open password-protected files as read-only.
I purchased this laptop with LINUX to do presentations while traveling. So far I am stuck, I cannot use the laptop because all my presentations from my client are password protected for a reason.

Can you report this to Open Office developers? I know it is not a bug. But is there some patch that will allow me to open a Microsoft password-protected file in Open Office?

If there is no solution, then please say so. We can send a man on the moon, isn't there a way to resolve such a simple problem as opening a Microsoft Presentation password-protected file in Open Office?

With Kind Regards,

Yvette Grant
ITIL Service Manager
416-286-1442
416-402-2563 (Mobile)
<email address hidden>

-----Original Message-----
From: <email address hidden> [mailto:<email address hidden>]On Behalf Of
Jamie Strandboge
Sent: Friday, March 28, 2008 8:54 AM
To: <email address hidden>
Subject: [Bug 192056] Re: Cannot Open Read-only MS Office 2003 files

Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug. I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Visibility changed to: Public

** This bug is no longer flagged as a security issue

--
Cannot Open Read-only MS Office 2003 files
https://bugs.launchpad.net/bugs/192056
You received this bug notification because you are a direct subscriber
of the bug.

Status in Source Package "openoffice.org2" in Ubuntu: New

Bug description:
Binary package hint: openoffice.org2

I am using OpenOffice 2.0.

I am trying to open a read-only MS PowerPoint presentation in OpenOffice.
I received the folllowing error:
Read Error: The loading of password-encrypted Microsoft PowerPoint presentaions is not supported.

This seems to be a simple problem. Can you help please. This is crucial.

Kind Regards,

Yvette

Yvette,

I'm not sure how I got CC:d in this, but since I have been, I'll add my 2¢.

The security on MS Office documents appears to be easily circumvented and probably only exists for the dual purposes of (false) marketing and hindering interoperability.
However, I myself neither use nor condone the use of MS Office, so I cannot do more than say that I hear from time to time about locked documents being retrieved.

But the above is not immediately helpful in getting your lost documents.

Since this is not a bug and not a problem with the *buntu distros, the best place to get practical information regarding question like this would be to contact the OpenOffice.org Users' mailing list and pose your question there:
   <email address hidden>

see also
  http://www.openoffice.org/servlets/SummarizeList?listName=users
  mailto:<email address hidden>
  http://www.openoffice.org/servlets/SearchList?listName=users

From there you should be able to 1) sooner or later get information about how to get your lost documents, 2) ensure that the needed functionality is eventually added to OpenOffice.org if it is currently missing.

Please see:

http://qa.openoffice.org/issues/show_bug.cgi?id=46307
[* Summary: Support RC4 encryption to load password protected PPT-files]

This is an upstream OOo bug.

Hi:

I seemed to be receiving only automated system response.

Can someone please respond to my dilemma. From the system replies I am receiving this problem originated from 2005. We are in 2008!

Yes I have checked the links you provided. It just explained you have a problem.

Will it be resolved? We also tested it on the latest version of Open Office, the problem is still unresolved.

I understand it is not a Security issue, you have mentioned this over and over in your response. It is a performance issue.

What I am expecting is a better response. SUCH AS "We have a compatibility issue and we are dealing with it". Or "we do have a patch that will fix this problem".

Kind Regards,

Yvette Grant
ITIL Service Manager
416-286-1442
416-402-2563 (Mobile)
<email address hidden>

-----Original Message-----
From: <email address hidden> [mailto:<email address hidden>]On Behalf Of
NoOp
Sent: Saturday, March 29, 2008 10:07 PM
To: <email address hidden>
Subject: [Bug 192056] Re: Cannot Open Read-only MS Office 2003 files

Please see:

http://qa.openoffice.org/issues/show_bug.cgi?id=46307
[* Summary: Support RC4 encryption to load password protected PPT-files]

This is an upstream OOo bug.

--
Cannot Open Read-only MS Office 2003 files
https://bugs.launchpad.net/bugs/192056
You received this bug notification because you are a direct subscriber
of the bug.

Status in Source Package "openoffice.org2" in Ubuntu: New

Bug description:
Binary package hint: openoffice.org2

I am using OpenOffice 2.0.

I am trying to open a read-only MS PowerPoint presentation in OpenOffice.
I received the folllowing error:
Read Error: The loading of password-encrypted Microsoft PowerPoint presentaions is not supported.

This seems to be a simple problem. Can you help please. This is crucial.

Kind Regards,

Yvette

Chris Cheney (ccheney) on 2008-04-01
Changed in openoffice.org2:
importance: Undecided → Medium
status: New → Confirmed
Changed in openoffice:
status: Unknown → Confirmed
Chris Cheney (ccheney) on 2008-06-13
Changed in openoffice.org:
status: Confirmed → Triaged
Chris Cheney (ccheney) on 2010-05-13
tags: added: hardy

Created attachment 42540
    message unable to read slide presentations with password

Hello and congratulations for this first release of LibreOffice:

I have a problem recurring with LibreOffice as on OpenOffice.org which is unable to read Microsoft Powerpoint slideshows with password.
When I want to read one, Impress puts me a message on a shot which I publish. An outcome is open on openoffice.org but nothing seems to be done:

http://QA.OpenOffice.org/issues/show_bug.cgi?id=46307

would be a nice feature edge, is it a candidate for an easy ( well harder ) hack, presumably the protection is documented now etc. -> thorsten who hopefully knows more

Attachment from upstream OOo bug that demonstrates the problem.

Attachment from upstream OOo bug that demonstrates the problem.

description: updated
tags: added: lo33
Changed in libreoffice (Ubuntu):
importance: Undecided → Wishlist
status: New → Triaged
summary: - [Upstream] [hardy] Cannot Open Read-only MS Office 2003 files
+ [Upstream] [hardy] Cannot Open password-encrypted MS Office 2003 files
Changed in df-libreoffice:
importance: Unknown → Medium
status: Unknown → Confirmed

ygrant, Please execute the following command, as it will automatically gather debugging information, in a terminal:
apport-collect 192056
When reporting bugs in the future please use apport by using 'ubuntu-bug' and the name of the package affected. You can learn more about this functionality at https://wiki.ubuntu.com/ReportingBugs.

Changed in openoffice.org (Ubuntu):
importance: Medium → Low
status: Triaged → Incomplete
Changed in openoffice.org (Ubuntu):
status: Incomplete → Won't Fix

[This is an automated message.]
There are no new official OpenOffice.org releases in Ubuntu packaging anymore => Won't Fix

If the problem persists, please mark this bug as "also affects project Libreoffice" or "also affects distribution Libreoffice (Ubuntu)" if that has not happened already.

Please leave references to upstream OpenOffice.org bugs in place to allow cross pollination.

This is:
- a clearcut upstream issue
- wishlist/feature request unlikely to be fixable with a simple patch
- wont be fixed in libreoffice packaging
Resolving as WONTFIX in libreoffice packaging. This does not mean the issue will not be cared about, but if it is cared about (even by Ubuntu/Canonical contributors), it is done upstream at LibreOffice.

Changed in libreoffice (Ubuntu):
status: Triaged → Won't Fix

Coming back to this - Rodo, on your radar? Kohei, any pointers - we do that for xlsx already, do we?

*** Bug 35327 has been marked as a duplicate of this bug. ***

(In reply to comment #3)
> Coming back to this - Rodo, on your radar? Kohei, any pointers - we do that for
> xlsx already, do we?
>
Anybody any pointers to MS rc4 encryption details? At least I see code in sw/source/filter/ww8/ww8par.cxx that at least claims to do something like that?

(In reply to comment #3)
> Coming back to this - Rodo, on your radar? Kohei, any pointers - we do that for
> xlsx already, do we?

We only do AES 128 for xlsx, which Excel 2007 uses by default. It generally works, but occasionally fails (there are several bug reports for this).

AFAIK we support RC4 only for the binary i.e. xls.

MSCodec_Std97 in filter does the RC4 encryption, both for encryption and decryption. We use that for the binary xls encryption support. I'm not sure about Writer's support for encrypted doc, but it probably uses this class too.

Changing slideshows -> slideshow. Let us please keep this bug targeted to the file already discussed. :D

Changed in df-libreoffice:
importance: Medium → Wishlist

Apologies for not having gotten around fixing this bug yet; unfortunately in future I'll have even less time at my disposal for this, so I'm freeing up ownership for other volunteers to take over.

DeMus (jan-mussche) wrote :

Also I can not open a password encrypted pps. I am using 4.0.3.3. I would expect, if I may be so bold, that if this error exists from the early days of Libreoffice that somebody would have looked at it and made it possible. Unfortunately not.

*** Bug 72552 has been marked as a duplicate of this bug. ***

Just for information, here is a link about RC4 CryptoAPI Encrypted Summary Stream used for
http://msdn.microsoft.com/en-us/library/dd943321%28v=office.12%29.aspx
(link given by this: http://msdn.microsoft.com/en-us/library/dd909022%28v=office.12%29.aspx and so for Powerpoint files)

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.