PT-2002-1875 · Microsoft · Office Web Components

Published 2002-08-23 · Updated 2018-10-12 · CVE-2002-0861

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Office Web Components (OWC) versions 2000 and 2002

Description: The issue allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled. This can be achieved via the Copy method of the Cell object or the Paste method of the Range object.

Recommendations: For Microsoft Office Web Components (OWC) version 2000, consider disabling the Copy method of the Cell object and the Paste method of the Range object as a temporary workaround. For Microsoft Office Web Components (OWC) version 2002, consider disabling the Copy method of the Cell object and the Paste method of the Range object as a temporary workaround.

Fix

Related Identifiers

CVE-2002-0861

Affected Products

Office Web Components

References · 5

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044 · Vendor Advisory
• http://iss.net/security_center/static/8779.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0861 · Security Note
• http://marc.info/?l=bugtraq&m=101829726516346&w=2 · Note
• http://securityfocus.com/bid/4457 · Note