Unscored CVE-2002-0727 EUVD-2002-0719GHSA-gx66-9wfp-gpfc

The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, wh…

Published Apr 2, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.

References

MS02-044 vendor-advisory
3006 vdb-entry
owc-spreadsheet-host-script-execution (8777) vdb-entry
20020408 Scripting for the scriptless with OWC in IE (GM#005-IE) mailing-list
4449 vdb-entry