There are three security vulnerabilities in an ActiveX control included in several of Microsoft Corp.'s most popular applications that give an attacker the ability to execute code and read files on a remote machine.
The flaw itself is in the Office Web Components (OWC) 2000 and 2002 software, which is included with Office 2000 and XP, BackOffice Server 2000, Internet Security and Acceleration Server 2000 and several other Microsoft applications. With OWC, users get limited Office functionality in a Web browser without having to install the entire Office application.
|