What is the severity of CVE-2002-1143?

CVE-2002-1143 has a medium severity rating due to the potential for sensitive information disclosure.

How do I fix CVE-2002-1143?

To fix CVE-2002-1143, users should apply the latest security patches released by Microsoft for affected versions of Word and Excel.

What software is affected by CVE-2002-1143?

CVE-2002-1143 affects various versions of Microsoft Word and Microsoft Excel, including versions 97, 2000, and 2002.

What exploit methods are utilized in CVE-2002-1143?

CVE-2002-1143 exploits certain field codes in Word and Excel, such as INCLUDETEXT and INCLUDEPICTURE, to steal sensitive information.

Is CVE-2002-1143 still a threat today?

While CVE-2002-1143 is not commonly exploited today, it is advisable to update to supported software versions to mitigate any potential risks.

Vulnerability/
CVE-2002-1143

medium

CWE

NVD-CWE-Other

3/4/2003

8/8/2024

CVE-2002-1143

First published: Thu Apr 03 2003(Updated: )

Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure."

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Microsoft Excel for Mac	=2002-sp1
Microsoft Word for Android	=97-sr2
Microsoft Word for Android	=2002-sp1
Microsoft Word for Android	=2000
Microsoft Word for Android	=2000-sr1a
Microsoft Word for Android	=97-sr1
Microsoft Word for Android	=98
Microsoft Word for Android	=97
Microsoft Excel for Mac	=2002
Microsoft Word for Android	=2002
Microsoft Word for Android	=2000-sp2
Microsoft Word for Android	=2002-sp2
Microsoft Word for Android	=2000-sr1
Microsoft Excel for Mac	=2002-sp2
Microsoft Word for Android	=98
Microsoft Word for Mac	=98
Microsoft Word for Mac	=2001
Microsoft Word for Mac

Remedy

http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp

Remedy

http://www.securityfocus.com/bid/5586

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2002-1143?
CVE-2002-1143 has a medium severity rating due to the potential for sensitive information disclosure.
How do I fix CVE-2002-1143?
To fix CVE-2002-1143, users should apply the latest security patches released by Microsoft for affected versions of Word and Excel.
What software is affected by CVE-2002-1143?
CVE-2002-1143 affects various versions of Microsoft Word and Microsoft Excel, including versions 97, 2000, and 2002.
What exploit methods are utilized in CVE-2002-1143?
CVE-2002-1143 exploits certain field codes in Word and Excel, such as INCLUDETEXT and INCLUDEPICTURE, to steal sensitive information.
Is CVE-2002-1143 still a threat today?
While CVE-2002-1143 is not commonly exploited today, it is advisable to update to supported software versions to mitigate any potential risks.

agent/references
agent/type
agent/remedy
agent/weakness
agent/author
agent/severity
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
agent/softwarecombine
agent/tags
collector/nvd-historical
vendor/microsoft
product/excel
canonical/microsoft excel
product/word
canonical/microsoft word
agent/software-canonical-lookup-request
collector/nvd-index
canonical/microsoft excel for mac
version/microsoft excel for mac/2002-sp1
canonical/microsoft word for android
version/microsoft word for android/97-sr2
version/microsoft word for android/2002-sp1
version/microsoft word for android/2000
version/microsoft word for android/2000-sr1a
version/microsoft word for android/97-sr1
version/microsoft word for android/98
version/microsoft word for android/97
version/microsoft excel for mac/2002
version/microsoft word for android/2002
version/microsoft word for android/2000-sp2
version/microsoft word for android/2002-sp2
version/microsoft word for android/2000-sr1
version/microsoft excel for mac/2002-sp2
canonical/microsoft word for mac
version/microsoft word for mac/98
version/microsoft word for mac/2001

Frequently Asked Questions

What is the severity of CVE-2002-1143?
CVE-2002-1143 has a medium severity rating due to the potential for sensitive information disclosure.
How do I fix CVE-2002-1143?
To fix CVE-2002-1143, users should apply the latest security patches released by Microsoft for affected versions of Word and Excel.
What software is affected by CVE-2002-1143?
CVE-2002-1143 affects various versions of Microsoft Word and Microsoft Excel, including versions 97, 2000, and 2002.
What exploit methods are utilized in CVE-2002-1143?
CVE-2002-1143 exploits certain field codes in Word and Excel, such as INCLUDETEXT and INCLUDEPICTURE, to steal sensitive information.
Is CVE-2002-1143 still a threat today?
While CVE-2002-1143 is not commonly exploited today, it is advisable to update to supported software versions to mitigate any potential risks.

CVE-2002-1143

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2002-1143?

How do I fix CVE-2002-1143?

What software is affected by CVE-2002-1143?

What exploit methods are utilized in CVE-2002-1143?

Is CVE-2002-1143 still a threat today?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2002-1143?

How do I fix CVE-2002-1143?

What software is affected by CVE-2002-1143?

What exploit methods are utilized in CVE-2002-1143?

Is CVE-2002-1143 still a threat today?