> MSO probably had security problems at least as large. Down in the parser and such, no doubt about it. But it would have also lacked much of the attack surfa

> MSO probably had security problems at least as large. Down in the parser and such, no doubt about it. But it would have also lacked much of the attack surface of IE, such as, oh, ActiveX. Granted that specific example would be easy enough to disable, but that's just one mine in the whole field. They definitely should have wrestled IE into shape, but the IE team clearly wasn't taking marching orders from the Office team. Organizational dysfunction manifested in sofware.