Microsoft has released an advisory related to an Office Web Components ActiveX vulnerability.

Posted by Kevin S

July 14, 2009

Microsoft Office An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. When using Internet Explorer, code execution is remote and may not require any user intervention.
This vulnerability exists in the ActiveX control used by IE to display Excel spreadsheets. Microsoft mentions that they are aware of active exploits against this vulnerability and at the moment there is no patch, just a a workaround. Workaround refers to a setting or configuration change that does not correct the underlying vulnerability but would…

Related Articles:

(This is an automated generated content. If you are the owner of this article and don't want to show this here, just write me at post@12n3.net and I'll remove it immediatly)

Tech Supportacceleration, Advisory, attack, attacker, Binary, change, ClassId, CLSID, code, code execution, common, compatibility, Components, control, dll, document, domain, Edition, excel spreadsheets, EXE, False, implements, Initialization, Internet, internet explorer code, internet security and acceleration, internet security and acceleration server, IObjectSafety, MICROS, Microsoft, microsoft internet security, microsoft office 2003, microsoft office document, microsoft office small business, microsoft office web components, microsoft office xp, office, office small business, office web components, office xp service pack, office xp service pack 3, office xp web components, OWC, Pack, path, payload, Progid, PROGRA, registry, Safe, Scripting, security, Server, Service, service pack 1, service pack 3, small business accounting, spreadsheet, system, TechNet, tool, true, update, update microsoft, user, value, vulnerability, Web, WEBCOM, workaround

Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically to your feed reader.

Comments

No comments yet.

Sorry, the comment form is closed at this time.

Microsoft has released an advisory related to an Office Web Components ActiveX vulnerability.

Comments

Top 10 Of The Week

Make a Donation to maintain 12n3.net active

Recent Posts

Login

Categories

Our affiliates sites