Used Microsoft Office Web Components Vulnerability Patch for Windows?


Editors’ Review

Download.com staff
Microsoft Office Web Components have security flaws. ActiveX controls allow attackers to read user data and run commands on systems.
  • Pros

    • Limited Office functionality in web browsers
    • No full Office application install needed
  • Cons

    • Three critical security vulnerabilities
    • Exploitable via websites or HTML email
    • Allows reading copied text
    • Enables reading any file on user system
    • Can allow attackers to run commands

Used Microsoft Office Web Components Vulnerability Patch for Windows?


Explore More


Full Specifications

GENERAL
Release
Latest update
Version
MS02-044
OPERATING SYSTEMS
Platform
Windows
Operating System
  • Windows NT
  • Windows ME
  • Windows 10
  • Windows XP
  • Windows 2000
  • Windows 98
Additional Requirements
Windows 98/Me/NT/2000/XP, Microsoft Office 2000
POPULARITY
Total Downloads
5,961
Downloads Last Week
0

Report Software

Program available in other languages


Last Updated


User Reviews

5/5

1 User Votes


Developer’s Description

Prevent a Web-based attack on your computer through a flaw in Microsoft Office Web Components.
The Office Web Components (OWC) contain several ActiveX controls that give users limited functionality of Microsoft Office in a Web browser without requiring that the user install the full Microsoft Office application. This allows users to utilize Microsoft Office applications in situations where installation of the full application is infeasible or undesirable. The control contains three security vulnerabilities, each of which could be exploited either via a Web site or an HTML mail. They could allow an attacker to read any text that the user had copied or cut from within other applications, and provide an attacker with a way to read any desired file on the user's system; and the most serious of vulnerabilities could allow an attacker to run commands on the user's system.

Download.com
Your review for Microsoft Office Web Components Vulnerability Patch