CVE-2002-0727: High severity Microsoft Project vulnerability

Published Sep 24, 2002

Updated

The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.

Affected Software

3 affected components

Microsoft Project=2002

Microsoft Office Web Components=2002

Microsoft Office Web Components=2000

Remediation

Patch Available

http://www.iss.net/security_center/static/8777.php

Event History

Sep 24, 2002

CVE Published

04:00 AM

Apr 2, 2003

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0727?

CVE-2002-0727 is considered a high severity vulnerability due to the potential for remote code execution.

How do I fix CVE-2002-0727?

To fix CVE-2002-0727, users should apply the latest security patches provided by Microsoft for Office Web Components.

What systems are affected by CVE-2002-0727?

CVE-2002-0727 affects Microsoft Office Web Components 2000 and 2002, as well as Microsoft Project 2002.

What type of vulnerability is CVE-2002-0727?

CVE-2002-0727 is a remote code execution vulnerability that allows attackers to run arbitrary commands.

Can CVE-2002-0727 be exploited through a web application?

Yes, CVE-2002-0727 can be exploited through a web application that utilizes the vulnerable OWC components.