VulnerabilityModified
CVE-2002-0727
The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.
HIGH 7.5EPSS 18.8%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 18.8%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 18.85% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/office web components · microsoft/project
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=101829645415486&w=2
- http://www.iss.net/security_center/static/8777.phpPatch, Vendor Advisory
- http://www.osvdb.org/3006
- http://www.securityfocus.com/bid/4449
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044
- http://marc.info/?l=bugtraq&m=101829645415486&w=2
- http://www.iss.net/security_center/static/8777.phpPatch, Vendor Advisory
- http://www.osvdb.org/3006
- http://www.securityfocus.com/bid/4449
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.