Do not override Flash ActiveX activation blocking (Office, CLSID 6E)
This `DWORD` value controls an exception to the Office COM kill bit for the ActiveX control identified by Microsoft as **Shockwave Flash Object**, CLSID `{D27CDB6E-AE6D-11CF-96B8-444553540000}`.
since 0.9.8.11
Purpose
Show registry keys (1)
HKLM\software\WOW6432Node\Microsoft\Office\Common\COM Compatibility\{D27CDB6E-AE6D-11CF-96B8-444553540000}\ActivationFilterOverride
This DWORD value controls an exception to the Office COM kill bit for the ActiveX control identified by Microsoft as Shockwave Flash Object, CLSID {D27CDB6E-AE6D-11CF-96B8-444553540000}.
A value of 0 does not enable the exception. Because Microsoft includes this control in the Office list of COM objects blocked from activation by default, the full in-process activation block remains in effect in affected Office applications.
Notes
Additional effects
The block is not limited to Flash objects embedded in or linked from Office documents. It also prevents other attempts to activate this COM object inside an Office process, including activation through automation or extensions.
The alternative value 1 would narrow the block to linking and embedding scenarios. Setting the value to 0 does not permit that relaxation.
Security
The setting prevents Office from loading this Flash ActiveX control into its process. This reduces the attack surface available to crafted Office documents and other Office-based activation paths that could attempt to exploit vulnerabilities in the Flash control.
Its scope is limited to the Office COM mechanism. It does not uninstall the control or automatically block other applications or browsers from invoking it.
Possible side effects
Office documents, templates, macros, or extensions that depend on this Flash control cannot run or display the affected content. Activation can also fail when the control is requested through an Office process without being embedded in or linked from a document.
Notes
The WOW6432Node path applies to 32-bit Office running on 64-bit Windows. Microsoft documents this unversioned Office path for Office 2010 and Office 2013; Office 2016 normally uses the corresponding path under Office\16.0.
This value is not a standalone kill bit. It only determines whether the full activation block for the specified CLSID is relaxed to cover linking and embedding scenarios alone. It also applies only to the CLSID ending in 6E; it does not cover the separate Flash factory CLSID {D27CDB70-AE6D-11CF-96B8-444553540000}.
Microsoft documentation
Microsoft Support: Security Settings for COM objects in Office
Microsoft Learn: Microsoft Security Advisory 2755801