CVE-2002-1143

Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure."
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:*:*:*:*:*:mac_os_x:*:*
cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:97:sr1:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:97:sr2:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:98:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:98:*:*:*:*:mac_os_x:*:*
cpe:2.3:a:microsoft:word:98:*:*:ja:*:*:*:*
cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:2000:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:2000:sr1:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:2000:sr1a:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:2001:*:*:*:*:mac_os_x:*:*
cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:2002:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:2002:sp2:*:*:*:*:*:*

History

No history.

Information

Published : 2003-04-11 04:00

Updated : 2024-02-04 16:31


NVD link : CVE-2002-1143

Mitre link : CVE-2002-1143

CVE.ORG link : CVE-2002-1143


JSON object : View

Products Affected

microsoft

  • word
  • excel