CVE-2002-1716

The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-08-08

Affected products

• Office (Microsoft)

References

• http://online.securityfocus.com/archive/1/265087
• http://www.guninski.com/m%24oxp-2.html
• http://www.securityfocus.com/bid/4398
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8711