CVE-2002-0861
Last modified
CVE-2002-0861 is a vulnerability of currently unknown severity. Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.. EPSS estimates a 15.83% chance of exploitation in the next 30 days.
Description
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Office Web Components | 2000 |
| Microsoft | Office Web Components | 2002 |
| Microsoft | Project | 2000 |
| Microsoft | Project | 2002 |
References
- http://www.iss.net/security_center/static/8779.phpPatch, Vendor Advisory
- http://www.iss.net/security_center/static/8779.phpPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2002-0861?
How severe is CVE-2002-0861?
How do I fix CVE-2002-0861?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2002
- CVE-2002-0855Cross-site scripting vulnerability in Mailman before 2.0.12 …
- CVE-2002-0856SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allow…
- CVE-2002-0857Format string vulnerabilities in Oracle Listener Control uti…
- CVE-2002-0858catsnmp in Oracle 9i and 8i is installed with a dbsnmp user …
- CVE-2002-0859Buffer overflow in the OpenDataSource function of the Jet en…
- CVE-2002-0860The LoadText method in the spreadsheet component in Microsof…
- CVE-2002-0862The (1) CertGetCertificateChain, (2) CertVerifyCertificateCh…
- CVE-2002-0863Remote Data Protocol (RDP) version 5.0 in Microsoft Windows …
- CVE-2002-0864The Remote Data Protocol (RDP) version 5.1 in Microsoft Wind…
- CVE-2002-0865A certain class that supports XML (Extensible Markup Languag…
- CVE-2002-0866Java Database Connectivity (JDBC) classes in Microsoft Virtu…
- CVE-2002-0867Microsoft Virtual Machine (VM) up to and including build 5.0…
Are you affected by CVE-2002-0861?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST