• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Office Web Components ActiveX Control URL Parsing Remote Code Execution Vulnerability

Solution:
Microsoft has released an advisory and fixes to address this issue. Please see the references for more information.


Microsoft Office Web Components 2000 0

• Microsoft Security Update for Commerce Sever 2000 (KB941305)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=71DE76BA-B62C -4A7A-A78A-9317F5255B13


• Microsoft Security Update For Microsoft BizTalk Server 2000 (KB939714)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=E0993E49C0A81 1D2973D00C04F79E4B3


• Microsoft Security Update For Microsoft BizTalk Server 2002 (KB939714)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12B7D09A92AB4 596996670799837D961


• Microsoft Security Update For Microsoft Office 2000 Service Pack 3 (KB931660)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=806c654a-35e3 -4385-855a-4b803249bfcf


• Microsoft Security Update for Microsoft Office Web Components 2000 used in ISA Server 2000 Reporting
  http://www.microsoft.com/downloads/details.aspx?FamilyId=526D87BD-C3DA -412E-8765-C15987AE9B01


• Microsoft Security Update For Microsoft Office XP Service Pack 3 (KB931660)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=806c654a-35e3 -4385-855a-4b803249bfcf


• Microsoft Visual Studio .NET 2002 Service Pack 1 MSOWC.DLL Security Update
  http://www.microsoft.com/downloads/details.aspx?FamilyId=D71B23FA-A873 -406D-BAD7-E38E565DEE39&displaylang=en


• Microsoft Visual Studio .NET 2003 Service Pack 1 MSOWC.DLL Security Update
  http://www.microsoft.com/downloads/details.aspx?FamilyId=2FE10CCD-40CB -4090-B83D-EAE3D4ECA174&displaylang=en