CVE-2002-1143

medium

Description

Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure."

References

Advisories
More

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A202

http://www.securityfocus.com/bid/5764

http://www.kb.cert.org/vuls/id/899713

http://marc.info/?l=bugtraq&m=103252858816401&w=2

http://marc.info/?l=bugtraq&m=103040003014999&w=2

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-059

http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp

Details

Source: Mitre, NVD

Published: 2003-04-11

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Severity: Medium

EPSS

EPSS: 0.53564