Information Disclosure Vulnerability in Microsoft Word and Excel

An information disclosure vulnerability exists in Word and Excel.

Ken Pfeil

October 17, 2002

2 Min Read
ITPro Today logo

Reported October 17, 2002, byMicrosoft.

VERSIONS AFFECTED

 

  • Microsoft Word 2002

  • Microsoft Word 2000

  • Microsoft Word 98(J)

  • Microsoft Word 97

  • Microsoft Excel 2002

  • Microsoft Word 2001 for Macintosh

  • Microsoft Word 98 for Macintosh

  • Microsoft Word X for Macintosh

 

DESCRIPTION

 

An information disclosure vulnerability exists inWord and Excel that lets an attacker create a document that, when opened,updates itself to include the contents of any file from the vulnerable computer.

 

VENDOR RESPONSE

 

Thevendor, Microsoft, has released SecurityBulletin MS02-059(Flaw in Word Fields and Excel External Updates Could Lead to InformationDisclosure) to address this vulnerability and recommends that affected usersapply the appropriate patch mentioned in the bulletin.

 

CREDIT

Discovered by Microsoft.

Read more about:

Microsoft
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like