CVE-2002-0618
Last modified
CVE-2002-0618 is a vulnerability of currently unknown severity. The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution".. EPSS estimates a 14.50% chance of exploitation in the next 30 days.
Description
The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution".
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Excel | 2000 |
| Microsoft | Excel | 2002 |
| Microsoft | Office | 2000 |
| Microsoft | Office | xp |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2002-0618?
How severe is CVE-2002-0618?
How do I fix CVE-2002-0618?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2002
- CVE-2002-0612FileSeek.cgi allows remote attackers to execute arbitrary co…
- CVE-2002-0613dnstools.php for DNSTools 2.0 beta 4 and earlier allows remo…
- CVE-2002-0614PHP-Survey 20000615 and earlier stores the global.inc file u…
- CVE-2002-0615The Windows Media Active Playlist in Microsoft Windows Media…
- CVE-2002-0616The Macro Security Model in Microsoft Excel 2000 and 2002 fo…
- CVE-2002-0617The Macro Security Model in Microsoft Excel 2000 and 2002 fo…
- CVE-2002-0619The Mail Merge Tool in Microsoft Word 2002 for Windows, when…
- CVE-2002-0620Buffer overflow in the Profile Service of Microsoft Commerce…
- CVE-2002-0621Buffer overflow in the Office Web Components (OWC) package i…
- CVE-2002-0622The Office Web Components (OWC) package installer for Micros…
- CVE-2002-0623Buffer overflow in AuthFilter ISAPI filter on Microsoft Comm…
- CVE-2002-0624Buffer overflow in the password encryption function of Micro…
Are you affected by CVE-2002-0618?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST