KB956391 and OWC

We use OWC from Office 2000 on our extranet to give our customers the ability
to input data in an Excel grid. After we installed KB956391 the usual Excel
sheet in the webpage has been replaced by a red x. We know it's KB956391
because we painstakingly uninstalled all the recent updates one by one - and
rebooted if required. After uninstalling KB956391, our spreadsheet returned.
This is going to affect every one of our customers, and the phones are
probably going to start ringing any minute. Is there a workaround to this,
besides uninstalling KB956391?

Thanks, Andre

From: Microsoft Security Advisory (956391)
Cumulative Security Update of ActiveX Kill Bits
http://www.microsoft.com/technet/sec...ry/956391.mspx

> You can provide feedback by completing the form by visiting Microsoft Help and Support: Contact Us.
> https://support.microsoft.com/common...echnet&sd=tech
>
> Customers in the United States and Canada can receive technical support from Microsoft Product Support
> Services. http://go.microsoft.com/fwlink/?LinkId=21131
> For more information about available support options, see Microsoft Help and Support.
> http://support.microsoft.com/

Please report this issue, Andre so that MS is aware of it.


MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============



Andre wrote:

> We use OWC from Office 2000 on our extranet to give our customers the ability
> to input data in an Excel grid. After we installed KB956391 the usual Excel
> sheet in the webpage has been replaced by a red x. We know it's KB956391
> because we painstakingly uninstalled all the recent updates one by one - and
> rebooted if required. After uninstalling KB956391, our spreadsheet returned.
> This is going to affect every one of our customers, and the phones are
> probably going to start ringing any minute. Is there a workaround to this,
> besides uninstalling KB956391?
>
> Thanks, Andre

Thanks, I just reported it to them.

"MowGreen [MVP]" wrote:

Please report this issue, Andre so that MS is aware of it.

Yopu're mowst welcome. And, thank you for taking the time to do so.

MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============


Andre wrote:

> Thanks, I just reported it to them.
>
> "MowGreen [MVP]" wrote:
>
> Please report this issue, Andre so that MS is aware of it.
>

I wanted to post a follow-up in case anyone is interested.

I just got off the phone with MS. I'm not the only one who reported this
issue. They are aware of it and their engineers are working on a fix that
will be released with next month's security updates. Hope this helps.

Andre

Nice work, Andre. If only others were as nice as you to take the time to
report issues such as this. <w>
The workarounds suggested in the Security Advisory defeat the purpose of
the update, setting killbits for ActiveX objects. It would be best to
advise your customers to proceed carefully when opening Excel attachments.

MowGreen [MVP 2003-2009]
===============
*-343-* FDNY
Never Forgotten
===============


Andre wrote:

> I wanted to post a follow-up in case anyone is interested.
>
> I just got off the phone with MS. I'm not the only one who reported this
> issue. They are aware of it and their engineers are working on a fix that
> will be released with next month's security updates. Hope this helps.
>
> Andre