Article ID: 262767 - View products that this article applies to.
This article was previously published under Q262767
Microsoft has released an update that eliminates a security vulnerability in Microsoft Office 2000 and all of the programs listed at the beginning of this article. The vulnerability could allow a malicious Web site operator or e-mail author to take inappropriate action on the computer of a user who visited the operator's Web site or opened the HTML e-mail message.
An ActiveX control that is included with Office 2000 is incorrectly marked as "safe for scripting". This control, the Office 2000 UA Control (Ouactrl.ocx), is used by the "Show Me" function in Office Help and allows Office functions to be scripted. A malicious Web site operator or e-mail author could use the control to carry out Office functions on the computer of a user who visited the Web site or opened the HTML e-mail message.
This update removes this unsafe functionality, with the result that the "Show Me" and pop-up window definition functions are turned off in Office 2000.
NOTE: The Office 2000 UA Control is not included in Microsoft Office 2000 Service Release 1a (SR-1a).
How to Install the UpdateFollow these steps to download and install this update:
Files Contained in the Uactlsec.exe DownloadIf you download Uactlsec.exe and manually extract the files by using a command line similar to the following
C:\Downloads\Uactlsec.exe /c /t:C:\Uafilesthe following files will be listed in the C:\Uafiles folder:
How to Verify That the Update Is SuccessfulTo verify whether the installation of the update was successful, you can check the version of the Ouactrl.ocx file, or you can verify whether the pop-up window and "Show Me" functionality is turned off, or you can do both.
How to Check the Version of Ouactrl.ocxThe original version of the Ouactrl.ocx file (1.01.0009 or 126.96.36.199) is replaced with the new version (2.0 or 188.8.131.52). By default, this file is in the following location on your computer:
C:\Program Files\Microsoft Office\Office
How to Check Whether Functionality for Pop-up Windows and "Show Me" Is Turned OffTo make sure the pop-up window and "Show Me" functionality is turned off, follow these steps:
Article ID: 262767 - Last Review: January 27, 2007 - Revision: 4.3