CVE Vulnerabilities

CVE-2002-1143

Published: Apr 11, 2003 | Modified: Oct 12, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure.

Affected Software

Name Vendor Start Version End Version
Excel Microsoft 2002 2002
Excel Microsoft 2002 2002
Excel Microsoft 2002 2002
Word Microsoft * *
Word Microsoft 97 97
Word Microsoft 97 97
Word Microsoft 97 97
Word Microsoft 98 98
Word Microsoft 98 98
Word Microsoft 98 98
Word Microsoft 2000 2000
Word Microsoft 2000 2000
Word Microsoft 2000 2000
Word Microsoft 2000 2000
Word Microsoft 2001 2001
Word Microsoft 2002 2002
Word Microsoft 2002 2002
Word Microsoft 2002 2002

References