CVE

Id
5530  
CVE No.
CVE-2002-1143  
Status
Candidate  
Description
Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure."  
Phase
Assigned (20020923)  
Votes
NOOP(1) Christey  
Comments
Christey> ADDREF CERT-VN:VU#899713 | URL:http://www.kb.cert.org/vuls/id/899713  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
30004 5530 CVE-2002-1143 BUGTRAQ:20020826 Security side-effects of Word fields  View
30005 5530 CVE-2002-1143 URL:http://marc.info/?l=bugtraq&m=103040003014999&w=2  View
30006 5530 CVE-2002-1143 BUGTRAQ:20020919 More vulnerabilities (Re: Security side-effects of Word fields)  View
30007 5530 CVE-2002-1143 URL:http://marc.info/?l=bugtraq&m=103252858816401&w=2  View
30008 5530 CVE-2002-1143 MS:MS02-059  View
30009 5530 CVE-2002-1143 URL:http://www.microsoft.com/technet/security/bulletin/ms02-059.asp  View
30010 5530 CVE-2002-1143 CONFIRM:http://www.microsoft.com/technet/treeview/default.asp?url=/Technet/security/topics/secword.asp  View
30011 5530 CVE-2002-1143 CERT-VN:VU#899713  View
30012 5530 CVE-2002-1143 URL:http://www.kb.cert.org/vuls/id/899713  View
30013 5530 CVE-2002-1143 BID:5586  View
30014 5530 CVE-2002-1143 URL:http://www.securityfocus.com/bid/5586  View
30015 5530 CVE-2002-1143 BID:5764  View
30016 5530 CVE-2002-1143 URL:http://www.securityfocus.com/bid/5764  View
30017 5530 CVE-2002-1143 OVAL:oval:org.mitre.oval:def:202  View
30018 5530 CVE-2002-1143 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:202  View
30019 5530 CVE-2002-1143 XF:word-includetext-read-files(10008)  View
30020 5530 CVE-2002-1143 URL:http://www.iss.net/security_center/static/10008.php  View
30021 5530 CVE-2002-1143 XF:word-includepicture-read-files(10155)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63897 JVNDB-2002-000224 Microsoft Word のフィールドコード処理における情報漏洩の脆弱性 Microsoft Word には、文書内に情報を挿入するフィールドコード機能に不備が存在するため、不正なフィールドコードを挿入された文書を開いた場合、ローカルファイルの内容を取得されてしまう脆弱性が存在します。なお、Microsoft Excel 2002 にも同様の脆弱性が報告されています。 CVE-2002-1143 5530 5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000224.html  View