Welcome to TechNet Blogs Sign in | Join | Help

Browse by Tags

All Tags » safe for initialization   (RSS)
Monday, July 13, 2009 4:55 AM

More information about the Office Web Components ActiveX vulnerability

We are aware of public attacks on the Internet exploiting a vulnerability in the Office Web Components Spreadsheet ActiveX control (OWC 10 and OWC11). Microsoft has released an advisory with further information available here . What’s the attacking vector?
Posted by swiblog | (Comments Off)
Tuesday, March 03, 2009 10:36 AM

Behavior of ActiveX controls embedded in Office documents

The Microsoft Office applications (Word, Excel, PowerPoint, etc) have built-in ActiveX control support. ActiveX support allows a richer experience when interacting with an Office document. For example, a document author could use the Safe-For-Initialization
Posted by swiblog | (Comments Off)
Tuesday, August 12, 2008 11:35 AM

MS08-050 : Locking an ActiveX control to specific applications.

MS08-050 concerns an ActiveX control that can be maliciously scripted to leak out personal information such as email addresses. There appeared to be no need for the control to have this behaviour so giving it a Kill-Bit seemed the correct approach to
Posted by swiblog | (Comments Off)
Sunday, February 03, 2008 11:17 PM

Not safe = not dangerous? How to tell if ActiveX vulnerabilities are exploitable in Internet Explorer

In early January you may have read posts on security distribution lists regarding two ActiveX Controls released by Microsoft. We have investigated those controls and fortunately, they are not exploitable since IE does not treat them as being safe. We
Posted by swiblog | (Comments Off)
Attachment(s): ClassId.cs
 
Page view tracker