← All CVEs

CVE-2002-0861

high · 7.5

Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.

7.5
CVSS
15.8%
EPSS (exploit prob.)
97th
EPSS percentile
2002-09-24
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

VendorProductAffected versions
microsoftoffice_web_components2000
microsoftoffice_web_components2002
microsoftproject2000
microsoftproject2002

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2002-0861