The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka Hyperlinked Excel Workbook Macro Bypass.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Excel | Microsoft | 2000 (including) | 2000 (including) |
| Excel | Microsoft | 2000-sp2 (including) | 2000-sp2 (including) |
| Excel | Microsoft | 2000-sr1 (including) | 2000-sr1 (including) |
| Excel | Microsoft | 2002 (including) | 2002 (including) |
| Excel | Microsoft | 2002-sp1 (including) | 2002-sp1 (including) |
| Office | Microsoft | 2000 (including) | 2000 (including) |
| Office | Microsoft | xp (including) | xp (including) |
References
- http://www.osvdb.org/5175
- http://www.securityfocus.com/bid/5064
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9398
- http://www.osvdb.org/5175
- http://www.securityfocus.com/bid/5064
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9398