Article ID: 322382
Article Last Modified on 3/29/2007
APPLIES TO
- Microsoft Office Web Components
- Microsoft Office Spreadsheet Component 9.0
- Microsoft Office Chart Component 9.0
- Microsoft Office PivotTable Component 9.0
This article was previously published under Q322382
SUMMARY
Microsoft has released an update to Microsoft Office Web Components. This update includes security fixes for both the Office 2000 Web Components and Office XP Web Components.
This article describes how to download and install the Office Web Components Security Update August 20, 2002.
For additional information about the latest service pack for Microsoft Office 2000, click the following article number to view the article in the Microsoft Knowledge Base:
276367 OFF2000: How to Obtain the Latest Office 2000 Service Pack
MORE INFORMATION
How to Download and Install the Update
The Office Web Component Security update is an IExpress package. To download and install this update, follow these steps:
- Visit the following Microsoft Web site:
- Click Save to save the Owcupd.exe file to the selected folder.
- In Windows Explorer, double-click Owcupd.exe.
- If you are prompted to install the update, click Yes.
- Click Yes to accept the License Agreement.
- When you receive a message that indicates that the installation was successful, click OK.
Note After you install the security update, you cannot remove it.
This update is also available in the following languages:
Arabic: ![[GRAPHIC: Click here ]](/wiki/index.php?title=File:Download.gif){kind=small}
Download now
Note The earlier link provides the English version of this fix that works with Arabic.
Basque: Download now
Czech: Download now
Croatian: Download now
Note The earlier link provides the English version of this fix that works with Croatian.
Danish: Download now
Estonian: Download now
Note The earlier link provides the English version of this fix that works with Estonian.
Finnish: Download now
French: Download now
German: Download now
Greek: Download now
Hebrew: Download now
Note The earlier link provides the English version of this fix that works with Hebrew.
Hungarian: Download now
Italian: Download now
Japanese: Download now
Norwegian: Download now
Polish: Download now
Portuguese: Download now
Portuguese (Brazil): Download now
Romanian: Download now
Russian: Download now
Slovenian: Download now
Slovak: Download now
Spanish: Download now
Swedish: Download now
Turkish: Download now
Ukrainian: Download now
Note The earlier link provides the English version of this fix that works with Ukrainian.
How to Determine Whether the Security Update Is Installed
After the Security Update is installed, the following files have the listed attributes or later:
File name Version
----------------------
Owc10.dll 10.0.4109.0
Msowc.dll 9.0.0.6430
Office XP
By default, the files Msowc.dll and Owc10.dll are in the following location on your computer:
Owc10.dll
drive:\Program Files\Common Files\Microsoft Shared\Web Components\10
msowc.dll
drive:\Program Files\Microsoft Office\Office10
where drive is the drive that Microsoft Office is installed on.
Office 2000
By default, the file Msowc.dll is in the following location on your computer:
msowc.dll
drive:\Program Files\Microsoft Office\Office
where drive is the drive that Microsoft Office is installed on.
To check the file version, follow these steps:
- Right-click Start, and then click Explorer.
- In Windows Explorer, locate one of the updated files, right-click the file, and then click Properties.
- Click the Version tab.
Issues Fixed by the Update
The update fixes the issues in Office XP described in the following Microsoft Knowledge Base articles:
309389 OFFXP: Loading XML File in Spreadsheet Component Takes a Long Time
317838 OFFXP: Months Are Sorted Incorrectly, Not Grouped by Year
325834 OFFXP: Web Components Are Static After You Install Publisher 2002
The update also fixes the following additional issues in both Office XP and Office 2000.
Security Fixes
- The Spreadsheet Component Host function is exploitable and has been removed.
- Spreadsheet Component methods allow script to see whether a file exists without doing cross-domain checks.
- The Spreadsheet copy and paste functions ignore the Allow paste operations via script security setting when it is turned off in Microsoft Internet Explorer.
- Various Office Web Component Load methods can be used to inventory files on the hard disk.
- The Spreadsheet Component Document function is exploitable and has been removed.
Additional query words: inf OFFXP fix list
Keywords: kbdownload kboffice2000sp3fix kbhowto kbofficewebchart kbofficewebpivot kbofficewebspread KB322382
