CVE-2002-1143
medium · 5Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure."
5
CVSS
53.6%
EPSS (exploit prob.)
99th
EPSS percentile
2003-04-11
Published
AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | excel | 2002 |
| microsoft | excel | 2002 |
| microsoft | excel | 2002 |
| microsoft | word | all versions |
| microsoft | word | 97 |
| microsoft | word | 97 |
| microsoft | word | 97 |
| microsoft | word | 98 |
| microsoft | word | 98 |
| microsoft | word | 98 |
| microsoft | word | 2000 |
| microsoft | word | 2000 |
| microsoft | word | 2000 |
| microsoft | word | 2000 |
| microsoft | word | 2001 |
| microsoft | word | 2002 |
| microsoft | word | 2002 |
| microsoft | word | 2002 |
Check a specific version with /api/v1/cve/match.
References
- http://marc.info/?l=bugtraq&m=103040003014999&w=2
- http://marc.info/?l=bugtraq&m=103252858816401&w=2
- http://www.iss.net/security_center/static/10008.php
- http://www.iss.net/security_center/static/10155.php
- http://www.kb.cert.org/vuls/id/899713
- http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp
- http://www.securityfocus.com/bid/5586
- http://www.securityfocus.com/bid/5764
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-059
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A202
- http://marc.info/?l=bugtraq&m=103040003014999&w=2
- http://marc.info/?l=bugtraq&m=103252858816401&w=2
- http://www.iss.net/security_center/static/10008.php
- http://www.iss.net/security_center/static/10155.php
- http://www.kb.cert.org/vuls/id/899713
- http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp
- http://www.securityfocus.com/bid/5586
- http://www.securityfocus.com/bid/5764
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-059
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A202
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2002-1143