MS02-031: Cumulative patches for Excel and Word for Windows (324458)

high Nessus Plugin ID 11336
New! Vulnerability Priority Rating (VPR)

Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it is different from CVSS.

VPR Score: 5.5

Synopsis

A Microsoft Office application installed on the remote host is affected by multiple vulnerabilities.

Description

The versions of Microsoft Word and Excel installed on the remote host are missing a security update. They are, therefore, affected by multiple vulnerabilities :

 - A security bypass vulnerability exists in Excel due to improper handling of formatted inline macros that are attached to objects within a workbook. An unauthenticated, remote attacker can exploit this, by convincing a user to open a specially crafted workbook, to execute macros outside the constraints of the Macro Security Model. (CVE-2002-0616)

 - A security bypass vulnerability exists in Excel due to improper handling of macros in a workbook when it is opened through a hyperlink associated with a drawing shape in another workbook. An unauthenticated, remote attacker can exploit this, by convincing a user to open a specially crafted workbook, to execute macros outside the constraints of the Macro Security Model.
 (CVE-2002-0617)

 - A flaw exists in the Macro Security Model in Excel due to a failure to correctly detect the presence of HTML scripting within an Excel workbook that contains an XSL stylesheet. An unauthenticated, remote attacker can exploit this, by convincing a user to open a specially crafted file, to execute arbitrary HTML scripts.
 (CVE-2002-0618)

 - A flaw exists in Word when opening Mail Merge documents that have been saved in HTML format. An unauthenticated, remote attacker can exploit this, by convincing a user to open a specially crafted document, to execute arbitrary VBA code in Access. (CVE-2002-0619)

Solution

Microsoft has released a set of patches for Excel 2000, Excel 2002, and Word 2002.

See Also

https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2002/ms02-031

Plugin Details

Severity: High

ID: 11336

File Name: smb_nt_ms02-031.nasl

Version: 1.81

Type: local

Agent: windows

Published: 3/10/2003

Updated: 11/15/2018

Dependencies: smb_hotfixes.nasl, ms_bulletin_checks_possible.nasl

Risk Information

Risk Factor: High

VPR Score: 5.5

CVSS v2.0

Base Score: 7.6

Temporal Score: 5.6

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Temporal Vector: E:U/RL:OF/RC:C

CVSS v3.0

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Temporal Vector: E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:microsoft:office, cpe:/a:microsoft:excel, cpe:/a:microsoft:word

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Ease: No known exploits are available

Patch Publication Date: 6/19/2002

Vulnerability Publication Date: 4/8/2002

Reference Information

CVE: CVE-2002-0616, CVE-2002-0617, CVE-2002-0618, CVE-2002-0619

BID: 4821, 5063, 5064, 5066

MSFT: MS02-031

MSKB: 324458