CVE-2002-0618

Microsoft Excel 2000 and 2002 - Remote Code Execution via XSL Stylesheet Script Execution

Title source: llm

Description

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution".

References (5)

Core 5

Core References

Mailing List mailing-list x_refsource_ntbugtraq

http://marc.info/?l=ntbugtraq&m=102256054320377&w=2

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/4821

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031

Third Party Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/9399.php

Various Sources x_refsource_misc

http://www.guninski.com/ex%24el2.html

Scores

EPSS 0.1450

EPSS Percentile 96.3%

Details

Status published

Products (4)

microsoft/excel 2000 (3 CPE variants)

microsoft/excel 2002 (2 CPE variants)

microsoft/office 2000

microsoft/office xp

Published Aug 12, 2002

Tracked Since Feb 18, 2026