CVE-2002-0861
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow...
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
- Record
CVE-2002-0861- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
- Record
CVE-2002-0861- Updated
- 2026-11-02
EUVDEUVD-2002-0853 No score
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
- Record
EUVD-2002-0853- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hr8g-mhfm-262q No score
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow...
Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.
- Record
GHSA-hr8g-mhfm-262q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0861 is a high vulnerability (CVSS 7.5) in Microsoft Office Web Components, published August 23, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 15.8%, the 96th percentile. No source names a fixed version.