PT-2002-1666 · Microsoft · Office Excel

Published 2002-08-12 · Updated 2018-10-12 · CVE-2002-0618

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions 2000 and 2002

Description The issue allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet.

Recommendations For Microsoft Excel 2000, update to a version that includes the fix for this issue. For Microsoft Excel 2002, update to a version that includes the fix for this issue. As a temporary workaround, consider avoiding the use of XSL stylesheets in Excel workbooks until a patch is available.

Fix

Related Identifiers

CVE-2002-0618

Affected Products

Office Excel

References · 7

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0618 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0618 · Note
• http://marc.info/?l=ntbugtraq&m=102256054320377&w=2 · Note
• http://guninski.com/ex%24el2.html · Note
• http://iss.net/security_center/static/9399.php · Note
• http://securityfocus.com/bid/4821 · Note