Microsoft Office Web Components Clipboard Information Disclosure Vulnerability

Microsoft Office Web Components Clipboard Information Disclosure Vulnerability

Microsoft Office Web Components (OWC) are a collection of ActiveX objects which provide limited Office functionality to web pages. OWC is installed by default with both Office 2000 and Office XP.

A vulnerability has been reported within some versions of the OWC Spreadsheet component. It is possible for a web page using this component to gain control of the clipboard operations, even when the 'Allow paste operations via script' security feature in IE is disabled.