Microsoft KB Archive/322382

= OFF: Office Web Components Security Update: August 20, 2002 =

Article ID: 322382

Article Last Modified on 3/29/2007

-

APPLIES TO


 * Microsoft Office Web Components
 * Microsoft Office Spreadsheet Component 9.0
 * Microsoft Office Chart Component 9.0
 * Microsoft Office PivotTable Component 9.0

-



This article was previously published under Q322382



SUMMARY
Microsoft has released an update to Microsoft Office Web Components. This update includes security fixes for both the Office 2000 Web Components and Office XP Web Components.

This article describes how to download and install the Office Web Components Security Update August 20, 2002.

For additional information about the latest service pack for Microsoft Office 2000, click the following article number to view the article in the Microsoft Knowledge Base:

276367 OFF2000: How to Obtain the Latest Office 2000 Service Pack



How to Download and Install the Update
The Office Web Component Security update is an IExpress package. To download and install this update, follow these steps:  Visit the following Microsoft Web site:

http://download.microsoft.com/download/office2000/Patch/owcupd/WIN98MeXP/EN-US/owcupd.exe

 Click Save to save the Owcupd.exe file to the selected folder. In Windows Explorer, double-click Owcupd.exe. If you are prompted to install the update, click Yes. Click Yes to accept the License Agreement. When you receive a message that indicates that the installation was successful, click OK.</ol>

Note After you install the security update, you cannot remove it.

This update is also available in the following languages:

Arabic: Download now

Note The earlier link provides the English version of this fix that works with Arabic.

Basque: Download now

Czech: Download now

Croatian: Download now

Note The earlier link provides the English version of this fix that works with Croatian.

Danish: Download now

Estonian: Download now

Note The earlier link provides the English version of this fix that works with Estonian.

Finnish: Download now

French: Download now

German: Download now

Greek: Download now

Hebrew: Download now

Note The earlier link provides the English version of this fix that works with Hebrew.

Hungarian: Download now

Italian: Download now

Japanese: Download now

Norwegian: Download now

Polish: Download now

Portuguese: Download now

Portuguese (Brazil): Download now

Romanian: Download now

Russian: Download now

Slovenian: Download now

Slovak: Download now

Spanish: Download now

Swedish: Download now

Turkish: Download now

Ukrainian: Download now

Note The earlier link provides the English version of this fix that works with Ukrainian.

How to Determine Whether the Security Update Is Installed
After the Security Update is installed, the following files have the listed attributes or later:

<pre class="fixed_text">  File name     Version --  Owc10.dll  10.0.4109.0 Msowc.dll  9.0.0.6430

Office XP
By default, the files Msowc.dll and Owc10.dll are in the following location on your computer:

Owc10.dll



msowc.dll



where  is the drive that Microsoft Office is installed on.

Office 2000
By default, the file Msowc.dll is in the following location on your computer:

msowc.dll



where  is the drive that Microsoft Office is installed on.

To check the file version, follow these steps:
 * 1) Right-click Start, and then click Explorer.
 * 2) In Windows Explorer, locate one of the updated files, right-click the file, and then click Properties.
 * 3) Click the Version tab.

Issues Fixed by the Update
The update fixes the issues in Office XP described in the following Microsoft Knowledge Base articles:

309389 OFFXP: Loading XML File in Spreadsheet Component Takes a Long Time

317838 OFFXP: Months Are Sorted Incorrectly, Not Grouped by Year

325834 OFFXP: Web Components Are Static After You Install Publisher 2002

The update also fixes the following additional issues in both Office XP and Office 2000.

Security Fixes
 * The Spreadsheet Component Host function is exploitable and has been removed.
 * Spreadsheet Component methods allow script to see whether a file exists without doing cross-domain checks.
 * The Spreadsheet copy and paste functions ignore the Allow paste operations via script security setting when it is turned off in Microsoft Internet Explorer.
 * Various Office Web Component Load methods can be used to inventory files on the hard disk.
 * The Spreadsheet Component Document function is exploitable and has been removed.

Additional query words: inf OFFXP fix list

Keywords: kbdownload kboffice2000sp3fix kbhowto kbofficewebchart kbofficewebpivot kbofficewebspread KB322382

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.