VULHUB ™

Microsoft Office Web Components (OWC) are a collection of ActiveX objects which provide limited Office functionality to web pages. A vulnerability has been reported within some versions of the OWC Spreadsheet component. It is possible for a web page using this component to execute arbitrary Active Script code, even when Active Scripting has been disabled by the client. Reportedly this formula may also be used to manipulate the browser Document Object Model (DOM), with less severe consequences.

Microsoft Office Web Components (OWC) are a collection of ActiveX objects which provide limited Office functionality to web pages. A vulnerability has been reported within some versions of the OWC Spreadsheet component. It is possible for a web page using this component to execute arbitrary Active Script code, even when Active Scripting has been disabled by the client. Reportedly this formula may also be used to manipulate the browser Document Object Model (DOM), with less severe consequences.