Microsoft Corporation Affected

Updated:  March 12, 2008



Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.


This issue is addressed in Microsoft Security Bulletin MS08-017. This update provides a newer version of MSOWC.DLL, sets the kill bit for the vulnerable versions of the Microsoft Office Spreadsheet control, and sets the phoenix bit to retain compatibility with web pages that refer to the old CLSID for the Spreadsheet control.