CVE-2002-0861

Currently unrated

Key Information:

Vendor
Microsoft
Status
Project
Office Web Components
Vendor
CVE Published:
24 September 2002

Summary

Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.

References

http://www.iss.net/security_center/static/8779.php
vdb-entryx_refsource_XF
http://marc.info/?l=bugtraq&m=101829726516346&w=2
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/4457
vdb-entryx_refsource_BID

EPSS Score

1% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.