CVEvulnerability
CVE-2002-1143
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-04-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure."
Affected configurations
• microsoft excel 2002
• microsoft word
• microsoft word 97
• microsoft word 98
• microsoft word 2000
• microsoft word 2001
• microsoft word 2002
References
- http://marc.info/?l=bugtraq&m=103040003014999&w=2 Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=103252858816401&w=2 Mailing List, Third Party Advisory
- http://www.iss.net/security_center/static/10008.php Broken Link
- http://www.iss.net/security_center/static/10155.php Broken Link
- http://www.kb.cert.org/vuls/id/899713 Third Party Advisory, US Government Resource
- http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp Patch, Vendor Advisory
- http://www.securityfocus.com/bid/5586 Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/bid/5764 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-059 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A202 Third Party Advisory
- http://marc.info/?l=bugtraq&m=103040003014999&w=2 Mailing List, Third Party Advisory
- http://marc.info/?l=bugtraq&m=103252858816401&w=2 Mailing List, Third Party Advisory
- http://www.iss.net/security_center/static/10008.php Broken Link
- http://www.iss.net/security_center/static/10155.php Broken Link
- http://www.kb.cert.org/vuls/id/899713 Third Party Advisory, US Government Resource
- http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp Patch, Vendor Advisory
- http://www.securityfocus.com/bid/5586 Exploit, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
- http://www.securityfocus.com/bid/5764 Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-059 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A202 Third Party Advisory