Remote Code Execution Vulnerability in Microsoft Office Web Components

CVE-2002-0861

Summary

Microsoft Office Web Components (OWC) versions 2000 and 2002 present a security flaw that allows remote attackers to circumvent the 'Allow paste operations via script' setting, even when this feature is disabled. By leveraging the Copy method of the Cell object or the Paste method of the Range object, attackers can gain unauthorized access to the clipboard and potentially execute harmful scripts. This vulnerability poses significant risks for users who utilize OWC within applications, especially in scenarios involving web content and dynamic interfaces.

References