Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2002-1143

Microsoft Word and Excel allow remote attackers to steal sensitive information via certain field codes that insert the information when the document is returned to the attacker, as demonstrated in Word using (1) INCLUDETEXT or (2) INCLUDEPICTURE, aka "Flaw in Word Fields and Excel External Updates Could Lead to Information Disclosure."

  • Published: Apr 11, 2003
  • Updated: Apr 13, 2023
  • CVE: CVE-2002-1143
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
microsoft / excel 2002-sp1 2002-sp1.x
microsoft / word 97-sr2 97-sr2.x
microsoft / word 2002-sp1 2002-sp1.x
microsoft / word 2000 2000.x
microsoft / word 2000-sr1a 2000-sr1a.x
microsoft / word 97-sr1 97-sr1.x
microsoft / word 98 98.x
microsoft / word 97 97.x
microsoft / excel 2002 2002.x
microsoft / word 2002 2002.x
microsoft / word 2000-sp2 2000-sp2.x
microsoft / word 2002-sp2 2002-sp2.x
microsoft / word 2000-sr1 2000-sr1.x
microsoft / excel 2002-sp2 2002-sp2.x
microsoft / word 2001 2001.x
microsoft / word - -