CVE-2002-1716

Microsoft Office XP - Arbitrary File Write via Host() Function

Title source: llm
STIX 2.1

Description

The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/4398
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/8711
Broken Link, Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://online.securityfocus.com/archive/1/265087
Various Sources x_refsource_misc
http://www.guninski.com/m%24oxp-2.html

Scores

EPSS 0.1426
EPSS Percentile 96.2%

Details

Status published
Products (1)
microsoft/office xp
Published Dec 31, 2002
Tracked Since Feb 18, 2026