CVE-2002-0617: The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute co...

Security readout for executives and security teams

This is an old Microsoft Excel macro-security bypass. A crafted workbook could use a hyperlink on a drawing shape to open another workbook containing an autoexecute macro, allowing code execution despite macro security expectations. Business urgency depends almost entirely on whether Excel 2000 or Excel 2002 for Windows still exists in the environment. Likely exposure is limited to legacy Windows endpoints running Microsoft Excel 2000 or 2002. Modern Office deployments are not identified as affected in the supplied bundle. Organizations with old embedded workstations, archived virtual machines, or unmanaged desktop images should verify whether these versions remain present. Prioritize this as a legacy-risk cleanup item with high impact but narrow likely scope. If affected Excel versions remain in production, remediation should be prompt because the issue concerns code execution through documents. If no Excel 2000 or 2002 exists, no direct exposure is supported by the supplied sources. Mitigation focus: Inventory endpoints for Microsoft Excel 2000 and Excel 2002 for Windows.; Review Microsoft MS02-031 for vendor-approved remediation and update guidance.; Remove or isolate unsupported legacy Office installations where remediation is unavailable..

Prepared

Jun 30, 2026, 13:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.