First published: Mon Aug 12 2002(Updated: )
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution".
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Office Excel | =2000 | |
Microsoft Office Excel | =2000-sp2 | |
Microsoft Office Excel | =2000-sr1 | |
Microsoft Office Excel | =2002 | |
Microsoft Office Excel | =2002-sp1 | |
Microsoft Office | =2000 | |
Microsoft Office | =xp |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0618 is considered a moderate severity vulnerability due to the potential for remote code execution.
To fix CVE-2002-0618, apply the latest security updates provided by Microsoft for Excel 2000 and 2002.
CVE-2002-0618 affects Microsoft Excel 2000, Excel 2002, and their respective service packs.
Yes, CVE-2002-0618 can be exploited remotely through malicious Excel workbooks containing HTML scripts.
A temporary workaround for CVE-2002-0618 is to disable macro functionality in Excel until a patch is applied.