OFF: Office Web Components Security Update: August 20, 2002 (322382)


The information in this article applies to:

  • Microsoft Office XP Web Components
  • Microsoft Office Spreadsheet Component 9.0
  • Microsoft Office Chart Component 9.0
  • Microsoft Office PivotTable Component 9.0
This article was previously published under Q322382

SUMMARY

Microsoft has released an update to Microsoft Office Web Components. This update includes security fixes for both the Office 2000 Web Components and Office XP Web Components.

This article describes how to download and install the Office Web Components Security Update August 20, 2002.

For additional information about the latest service pack for Microsoft Office 2000, click the following article number to view the article in the Microsoft Knowledge Base:

276367 OFF2000: How to Obtain the Latest Office 2000 Service Pack

MORE INFORMATION

How to Download and Install the Update

The Office Web Component Security update is an IExpress package. To download and install this update, follow these steps:
  1. Visit the following Microsoft Web site:

    http://download.microsoft.com/download/office2000/Patch/owcupd/WIN98MeXP/EN-US/owcupd.exe

  2. Click Save to save the Owcupd.exe file to the selected folder.
  3. In Windows Explorer, double-click Owcupd.exe.
  4. If you are prompted to install the update, click Yes.
  5. Click Yes to accept the License Agreement.
  6. When you receive a message that indicates that the installation was successful, click OK.
Note After you install the security update, you cannot remove it.

This update is also available in the following languages:

Arabic: Click here Download now

Note The earlier link provides the English version of this fix that works with Arabic.

Basque: Click here Download now

Czech: Click here Download now

Croatian: Click here Download now

Note The earlier link provides the English version of this fix that works with Croatian.

Danish: Click here Download now

Dutch: Click here Download now

Estonian: Click here Download now

Note The earlier link provides the English version of this fix that works with Estonian.

Finnish: Click here Download now

French: Click here Download now

German: Click here Download now

Greek: Click here Download now

Hebrew: Click here Download now

Note The earlier link provides the English version of this fix that works with Hebrew.

Hungarian: Click here Download now

Italian: Click here Download now

Japanese: Click here Download now

Norwegian: Click here Download now

Polish: Click here Download now

Portuguese: Click here Download now

Portuguese (Brazil): Click here Download now

Romanian: Click here Download now

Russian: Click here Download now

Slovenian: Click here Download now

Slovak: Click here Download now

Spanish: Click here Download now

Swedish: Click here Download now

Thai: Click here Download now

Turkish: Click here Download now

Ukrainian: Click here Download now

Note The earlier link provides the English version of this fix that works with Ukrainian.

How to Determine Whether the Security Update Is Installed

After the Security Update is installed, the following files have the listed attributes or later: 

   File name     Version 
   ----------------------
   Owc10.dll  10.0.4109.0
   Msowc.dll   9.0.0.6430

Office XP

By default, the files Msowc.dll and Owc10.dll are in the following location on your computer:

Owc10.dll

drive:\Program Files\Common Files\Microsoft Shared\Web Components\10

msowc.dll

drive:\Program Files\Microsoft Office\Office10

where drive is the drive that Microsoft Office is installed on.

Office 2000

By default, the file Msowc.dll is in the following location on your computer:

msowc.dll

drive:\Program Files\Microsoft Office\Office

where drive is the drive that Microsoft Office is installed on.

To check the file version, follow these steps:
  1. Right-click Start, and then click Explorer.
  2. In Windows Explorer, locate one of the updated files, right-click the file, and then click Properties.
  3. Click the Version tab.

Issues Fixed by the Update

The update fixes the issues in Office XP described in the following Microsoft Knowledge Base articles:

309389 OFFXP: Loading XML File in Spreadsheet Component Takes a Long Time

317838 OFFXP: Months Are Sorted Incorrectly, Not Grouped by Year

325834 OFFXP: Web Components Are Static After You Install Publisher 2002

The update also fixes the following additional issues in both Office XP and Office 2000.

Security Fixes
  • The Spreadsheet Component Host function is exploitable and has been removed.
  • Spreadsheet Component methods allow script to see whether a file exists without doing cross-domain checks.
  • The Spreadsheet copy and paste functions ignore the Allow paste operations via script security setting when it is turned off in Microsoft Internet Explorer.
  • Various Office Web Component Load methods can be used to inventory files on the hard disk.
  • The Spreadsheet Component Document function is exploitable and has been removed.
Modification Type:MinorLast Reviewed:8/5/2004
Keywords:kbdownload kbOffice2000SP3Fix kbhowto kbOfficeWebChart kbOfficeWebPivot kbOfficeWebSpread KB322382
©2004 Microsoft Corporation. All rights reserved.