Description
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
References (4)
Core 4
Core References
Patch, Vendor Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/8779.php
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/4457
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=101829726516346&w=2
Scores
EPSS
0.1583
EPSS Percentile
96.6%
Details
Status
published
Products (4)
microsoft/office_web_components
2000
microsoft/office_web_components
2002
microsoft/project
2000
microsoft/project
2002
Published
Sep 24, 2002
Tracked Since
Feb 18, 2026