PT-2002-1666 · Microsoft · Office Excel

Publicado 2002-08-12 · Atualizado 2018-10-12 · CVE-2002-0618

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2000 and 2002

Description The issue allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet.

Recommendations For Microsoft Excel 2000, update to a version that includes the fix for this issue. For Microsoft Excel 2002, update to a version that includes the fix for this issue. As a temporary workaround, consider avoiding the use of XSL stylesheets in Excel workbooks until a patch is available.

Correção

Identificadores relacionados

CVE-2002-0618

Produtos afetados

Office Excel

Referências · 7

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0618 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031 · Aviso do Fabricante
• http://marc.info/?l=ntbugtraq&m=102256054320377&w=2 · Nota
• http://guninski.com/ex%24el2.html · Nota
• http://iss.net/security_center/static/9399.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0618 · Nota de Segurança
• http://securityfocus.com/bid/4821 · Nota