What’s Vulnerable › Vulnerabilities

CVE-2002-0617

• Severity: medium (CVSS 5.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-08-12 · updated 2026-06-16

Description

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."

Affected products

• Microsoft Excel 2013 Service Pack 1: 2000, 2000-sp2, 2000-sr1, 2002, 2002-sp1
• Microsoft Office: 2000, xp

References

• http://www.osvdb.org/5175
• http://www.securityfocus.com/bid/5064
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9398
• http://www.osvdb.org/5175
• http://www.securityfocus.com/bid/5064
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9398

Get alerted when CVE-2002-0617 or the next vulnerability affects your stack