OFF: Office Web Components Security Update: August 20, 2002

Retired KB Content Disclaimer
This article was written about products for which Microsoft no longer offers support. Therefore, this article is offered "as is" and will no longer be updated.
Summary
Microsoft has released an update to Microsoft Office Web Components. This update includes security fixes for both the Office 2000 Web Components and Office XP Web Components.

This article describes how to download and install the Office Web Components Security Update August 20, 2002.

For additional information about the latest service pack for Microsoft Office 2000, click the following article number to view the article in the Microsoft Knowledge Base:
276367 OFF2000: How to Obtain the Latest Office 2000 Service Pack
More information

How to Download and Install the Update

The Office Web Component Security update is an IExpress package. To download and install this update, follow these steps:
  1. Visit the following Microsoft Web site:
  2. Click Save to save the Owcupd.exe file to the selected folder.
  3. In Windows Explorer, double-click Owcupd.exe.
  4. If you are prompted to install the update, click Yes.
  5. Click Yes to accept the License Agreement.
  6. When you receive a message that indicates that the installation was successful, click OK.
Note After you install the security update, you cannot remove it.

This update is also available in the following languages:

Arabic: Click		  here Download now

Note The earlier link provides the English version of this fix that works with Arabic.

Basque: Click		  here Download now

Czech: Click		  here Download now

Croatian: Click		  here Download now

Note The earlier link provides the English version of this fix that works with Croatian.

Danish: Click		  here Download now

Estonian: Click		  here Download now

Note The earlier link provides the English version of this fix that works with Estonian.

Finnish: Click		  here Download now

French: Click		  here Download now

German: Click		  here Download now

Greek: Click		  here Download now

Hebrew: Click		  here Download now

Note The earlier link provides the English version of this fix that works with Hebrew.

Hungarian: Click		  here Download now

Italian: Click		  here Download now

Japanese: Click		  here Download now

Norwegian: Click		  here Download now

Polish: Click		  here Download now

Portuguese: Click		  here Download now

Portuguese (Brazil): Click		  here Download now

Romanian: Click		  here Download now

Russian: Click		  here Download now

Slovenian: Click		  here Download now

Slovak: Click		  here Download now

Spanish: Click		  here Download now

Swedish: Click		  here Download now

Turkish: Click		  here Download now

Ukrainian: Click		  here Download now

Note The earlier link provides the English version of this fix that works with Ukrainian.

How to Determine Whether the Security Update Is Installed

After the Security Update is installed, the following files have the listed attributes or later:
   File name     Version    ----------------------   Owc10.dll  10.0.4109.0   Msowc.dll   9.0.0.6430					

Office XP

By default, the files Msowc.dll and Owc10.dll are in the following location on your computer:
Owc10.dll

drive:\Program Files\Common Files\Microsoft Shared\Web Components\10

msowc.dll

drive:\Program Files\Microsoft Office\Office10
where drive is the drive that Microsoft Office is installed on.

Office 2000

By default, the file Msowc.dll is in the following location on your computer:
msowc.dll

drive:\Program Files\Microsoft Office\Office
where drive is the drive that Microsoft Office is installed on.

To check the file version, follow these steps:
  1. Right-click Start, and then click Explorer.
  2. In Windows Explorer, locate one of the updated files, right-click the file, and then click Properties.
  3. Click the Version tab.

Issues Fixed by the Update

The update fixes the issues in Office XP described in the following Microsoft Knowledge Base articles:

309389 OFFXP: Loading XML File in Spreadsheet Component Takes a Long Time
317838 OFFXP: Months Are Sorted Incorrectly, Not Grouped by Year
325834 OFFXP: Web Components Are Static After You Install Publisher 2002
The update also fixes the following additional issues in both Office XP and Office 2000.

Security Fixes
  • The Spreadsheet Component Host function is exploitable and has been removed.
  • Spreadsheet Component methods allow script to see whether a file exists without doing cross-domain checks.
  • The Spreadsheet copy and paste functions ignore the Allow paste operations via script security setting when it is turned off in Microsoft Internet Explorer.
  • Various Office Web Component Load methods can be used to inventory files on the hard disk.
  • The Spreadsheet Component Document function is exploitable and has been removed.
inf OFFXP fix list
Eigenschappen

Artikel-id: 322382 - Laatst bijgewerkt: 06/19/2014 14:48:00 - Revisie: 5.0

  • kbdownload kboffice2000sp3fix kbhowto kbofficewebchart kbofficewebpivot kbofficewebspread KB322382
Feedback