Unscored severity · published Aug 12, 2002
CVE-2002-0618
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel…
–
CVSS
14.5%
EPSS
No
On KEV
Description
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution".
Exploitation
Is it being used?
Exploit prediction (EPSS)14.5% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2000; xp · source: NVD
EX
Excel · Microsoft
2000; 2000; 2000; 2002; 2002 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0618
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0618
marc.info
http://marc.info/?l=ntbugtraq&m=102256054320377&w=2
www.guninski.com
http://www.guninski.com/ex%24el2.html
www.iss.net
http://www.iss.net/security_center/static/9399.php
www.securityfocus.com
http://www.securityfocus.com/bid/4821
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability