Office 2000 UA Control Vulnerability

A security vulnerability exists in Microsoft® Office 2000 products which could allow a malicious web site operator to take inappropriate action on the computer of a user who visited his web site.

Issue

An ActiveX control that ships as part of Office 2000 is incorrectly marked as "safe for scripting". This control, the Office 2000 UA Control, is used by the "Show Me" function in Office Help, and allows Office functions to be scripted. A malicious web site operator could use the control to carry out Office functions on the machine of a user who visited his site.

Affected Products

• Microsoft Office 2000 Products

Download

Patch: http://officeupdate.microsoft.com/info/ocx.htm

Further Details

Source: Microsoft Corporation

Reference: Microsoft Corporation

Updated: May 12, 2000

>> Recommended Download - secure your PC from spyware, adware and malware now with Spyware Doctor <<