OW
Product
Office Web Components
On CISA KEVExploited in the wildRansomware-linked
13
CVEs
2
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add Office Web Components to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-1856 In wildKEV | 8.8 | Aug 15 | Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability Affected: 2003 |
| CVE-2012-0158 RansomwareIn wildKEV | 8.8 | Apr 10 | Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability Affected: 2003 |
| CVE-2009-2496 | – | Aug 12 | Heap-based buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3,… Affected: 2000; 2003; 2003; xp |
| CVE-2009-1534 | – | Aug 12 | Buffer overflow in the Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2000 Web Components SP3, Office XP Web Components SP3, BizTalk Server 2002, and… Affected: 2000; 2003; 2003; xp |
| CVE-2009-0562 | – | Aug 12 | The Office Web Components ActiveX Control in Microsoft Office XP SP3, Office 2003 SP3, Office XP Web Components SP3, Office 2003 Web Components SP3, Office 2003 Web Components SP1… Affected: 2000; 2003; 2003; xp |
| CVE-2009-1136 | – | Jul 15 | The Microsoft Office Web Components Spreadsheet ActiveX control (aka OWC10 or OWC11), as distributed in Office XP SP3 and Office 2003 SP3, Office XP Web Components SP3, Office… Affected: 2003; 2003; xp |
| CVE-2006-4695 | – | Dec 31 | Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka… Affected: 2000 |
| CVE-2002-1339 | – | Dec 18 | The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files… Affected: 2002 |
| CVE-2002-1338 | – | Dec 18 | The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to… Affected: 2002 |
| CVE-2002-1340 | – | Dec 18 | The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting… Affected: 2002 |
| CVE-2002-0727 | – | Sep 24 | The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute… Affected: 2000; 2002 |
| CVE-2002-0861 | – | Sep 24 | Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy… Affected: 2000; 2002 |
| CVE-2002-0860 | – | Sep 24 | The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer… Affected: 2000; 2002 |
Showing 13