CVE-2002-0860: Medium severity Microsoft Project vulnerability
Published Sep 24, 2002
·Updated
The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file.
Affected Software
4 affected components
Microsoft Project=2000
Microsoft Project=2002
Microsoft Office Web Components=2002
Microsoft Office Web Components=2000
Remediation
Patch Available
Event History
Sep 24, 2002
CVE Published
04:00 AM
Apr 2, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-0860?
CVE-2002-0860 is classified as a medium severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2002-0860?
To fix CVE-2002-0860, ensure you apply the latest updates and patches provided by Microsoft for the affected products.
3
What products are affected by CVE-2002-0860?
CVE-2002-0860 affects Microsoft Office Web Components 2000 and 2002, as well as Microsoft Project 2000 and 2002.
4
What type of attacks are possible with CVE-2002-0860?
CVE-2002-0860 allows remote attackers to read arbitrary files through a crafted URL that redirects to the file.
5
When was CVE-2002-0860 disclosed?
CVE-2002-0860 was disclosed in the year 2002.