Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2002-1143
HistoryApr 11, 2003 - 4:00 a.m.

CVE-2002-1143

2003-04-1104:00:00
[email protected]
web.nvd.nist.gov
6

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.027

Percentile

90.7%

JSON

Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka “Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure.”

Affected configurations

Nvd
Node
microsoftexcelMatch2002
OR
microsoftexcelMatch2002sp1
OR
microsoftexcelMatch2002sp2
OR
microsoftwordmac_os_x
OR
microsoftwordMatch97
OR
microsoftwordMatch97sr1
OR
microsoftwordMatch97sr2
OR
microsoftwordMatch98
OR
microsoftwordMatch98mac_os_x
OR
microsoftwordMatch98ja
OR
microsoftwordMatch2000
OR
microsoftwordMatch2000sp2
OR
microsoftwordMatch2000sr1
OR
microsoftwordMatch2000sr1a
OR
microsoftwordMatch2001mac_os_x
OR
microsoftwordMatch2002
OR
microsoftwordMatch2002sp1
OR
microsoftwordMatch2002sp2
VendorProductVersionCPE
microsoftexcel2002cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*
microsoftexcel2002cpe:2.3:a:microsoft:excel:2002:sp1:*:*:*:*:*:*
microsoftexcel2002cpe:2.3:a:microsoft:excel:2002:sp2:*:*:*:*:*:*
microsoftword*cpe:2.3:a:microsoft:word:*:*:*:*:*:mac_os_x:*:*
microsoftword97cpe:2.3:a:microsoft:word:97:*:*:*:*:*:*:*
microsoftword97cpe:2.3:a:microsoft:word:97:sr1:*:*:*:*:*:*
microsoftword97cpe:2.3:a:microsoft:word:97:sr2:*:*:*:*:*:*
microsoftword98cpe:2.3:a:microsoft:word:98:*:*:*:*:*:*:*
microsoftword98cpe:2.3:a:microsoft:word:98:*:*:*:*:mac_os_x:*:*
microsoftword98cpe:2.3:a:microsoft:word:98:*:*:ja:*:*:*:*
Rows per page:
1-10 of 181

Related

cve 1
exploitdb 2
cvelist 1
cert 1
cve
cve
CVE-2002-1143
2003-04-11 04:00:00
exploitdb
exploitdb
Microsoft Word 95/97/98/2000/2002 - 'INCLUDEPICTURE' Document Sharing File Disclosure
2002-09-20 00:00:00
Microsoft Word 95/97/98/2000/2002 / Excel 2002 - INCLUDETEXT Document Sharing File Disclosure
2002-08-26 00:00:00
cvelist
cvelist
CVE-2002-1143
2003-04-03 05:00:00
cert
cert
Microsoft Word and Excel documents allow local file reading by via embedded fields
2002-10-17 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.027

Percentile

90.7%

JSON
Related for NVD:CVE-2002-1143
cve1exploitdb2cvelist1cert1