OFF: Office Web Components Security Update: August 20, 2002

Disclaimer voor KB-inhoud ingetrokken

Dit artikel gaat over producten waarvoor Microsoft niet langer ondersteuning biedt. Daarom wordt dit artikel aangeboden 'as is' en wordt het niet langer bijgewerkt.

Summary

Microsoft has released an update to Microsoft Office Web Components. This update includes security fixes for both the Office 2000 Web Components and Office XP Web Components.

This article describes how to download and install the Office Web Components Security Update August 20, 2002.

For additional information about the latest service pack for Microsoft Office 2000, click the following article number to view the article in the Microsoft Knowledge Base:
276367 OFF2000: How to Obtain the Latest Office 2000 Service Pack

More Information

How to Download and Install the Update

The Office Web Component Security update is an IExpress package. To download and install this update, follow these steps:
  1. Visit the following Microsoft Web site:
  2. Click Save to save the Owcupd.exe file to the selected folder.
  3. In Windows Explorer, double-click Owcupd.exe.
  4. If you are prompted to install the update, click Yes.
  5. Click Yes to accept the License Agreement.
  6. When you receive a message that indicates that the installation was successful, click OK.
Note After you install the security update, you cannot remove it.

This update is also available in the following languages:

Arabic: Click here  Download now

Note The earlier link provides the English version of this fix that works with Arabic.

Basque: Click here  Download now

Czech: Click here  Download now

Croatian: Click here  Download now

Note The earlier link provides the English version of this fix that works with Croatian.

Danish: Click here  Download now

Estonian: Click here  Download now

Note The earlier link provides the English version of this fix that works with Estonian.

Finnish: Click here  Download now

French: Click here  Download now

German: Click here  Download now

Greek: Click here  Download now

Hebrew: Click here  Download now

Note The earlier link provides the English version of this fix that works with Hebrew.

Hungarian: Click here  Download now

Italian: Click here  Download now

Japanese: Click here  Download now

Norwegian: Click here  Download now

Polish: Click here  Download now

Portuguese: Click here  Download now

Portuguese (Brazil): Click here  Download now

Romanian: Click here  Download now

Russian: Click here  Download now

Slovenian: Click here  Download now

Slovak: Click here  Download now

Spanish: Click here  Download now

Swedish: Click here  Download now

Turkish: Click here  Download now

Ukrainian: Click here  Download now

Note The earlier link provides the English version of this fix that works with Ukrainian.

How to Determine Whether the Security Update Is Installed

After the Security Update is installed, the following files have the listed attributes or later:

File name Version
----------------------
Owc10.dll 10.0.4109.0
Msowc.dll 9.0.0.6430

Office XP

By default, the files Msowc.dll and Owc10.dll are in the following location on your computer:
Owc10.dll

drive:\Program Files\Common Files\Microsoft Shared\Web Components\10

msowc.dll

drive:\Program Files\Microsoft Office\Office10
where
drive is the drive that Microsoft Office is installed on.

Office 2000

By default, the file Msowc.dll is in the following location on your computer:
msowc.dll

drive:\Program Files\Microsoft Office\Office
where
drive is the drive that Microsoft Office is installed on.

To check the file version, follow these steps:
  1. Right-click Start, and then click Explorer.
  2. In Windows Explorer, locate one of the updated files, right-click the file, and then click Properties.
  3. Click the Version tab.

Issues Fixed by the Update

The update fixes the issues in Office XP described in the following Microsoft Knowledge Base articles:

309389 OFFXP: Loading XML File in Spreadsheet Component Takes a Long Time

317838 OFFXP: Months Are Sorted Incorrectly, Not Grouped by Year

325834 OFFXP: Web Components Are Static After You Install Publisher 2002

The update also fixes the following additional issues in both Office XP and Office 2000.

Security Fixes
  • The Spreadsheet Component Host function is exploitable and has been removed.
  • Spreadsheet Component methods allow script to see whether a file exists without doing cross-domain checks.
  • The Spreadsheet copy and paste functions ignore the Allow paste operations via script security setting when it is turned off in Microsoft Internet Explorer.
  • Various Office Web Component Load methods can be used to inventory files on the hard disk.
  • The Spreadsheet Component Document function is exploitable and has been removed.
Eigenschappen

Artikel-id: 322382 - Laatst bijgewerkt: 19 jun. 2014 - Revisie: 1

Feedback